Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

TODO vulnerabilities

4 published CVEs name TODO among the affected products.

All 4 in the listAtom feed of new CVEs
Published CVEs
4
Last 12 months
0
Critical
0
Known exploited
0

Critical 0High 3Medium 1Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20212
  2. 20222

Newest CVEs

  • CVE-2022-3154

    Multiple Plugins from Viszt Peter - Multiple CSRF

    TODO · Woo Billingo Plus

    High7.1
  • CVE-2022-2594

    Advanced Custom Fields 5.0-5.12.2 - Unauthenticated File Upload

    TODO · Advanced Custom Fields

    High8.8
  • CVE-2021-24892

    Advanced Forms < 1.6.9 - Subscriber+ Arbitrary User Email Address Update via IDOR

    TODO · Advanced Forms Ppro

    High8.8
  • CVE-2021-24713

    Video Lessons Manager - Admin+ Stored Cross-Site Scripting

    TODO · Video Lessons Manager – Best Video Course LMS

    Medium4.8

Products with the most CVEs

  1. Advanced Custom Fields1
  2. Advanced Custom Fields Pro1
  3. Advanced Forms1
  4. Advanced Forms Ppro1
  5. Integration for Billingo & Gravity Forms1
  6. Integration for Szamlazz.hu & Gravity Forms1
  7. Video Lessons Manager Pro – Best Video Course LMS1
  8. Video Lessons Manager – Best Video Course LMS1
  9. Woo Billingo Plus1

Most common weaknesses

  1. CWE-352 Cross-site request forgery (CSRF)1
  2. CWE-434 Unrestricted file upload1
  3. CWE-639 Authorization bypass through a user-controlled key (IDOR)1
  4. CWE-79 Cross-site scripting (XSS)1