Webfactory Ltd vulnerabilities
5 vulnerabilities
Known vulnerabilities in Webfactory Ltd products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 4 products.
Products
4- WP Reset PRO2 vulnerabilities
- Captcha Code1 vulnerabilities
- Guest Author1 vulnerabilities
- Login Lockdown – Protect Login Form1 vulnerabilities
CVE-2021-36909webfactory ltd.wp reset pro+2
EPSS score1.89%
Authenticated Database Reset vulnerability in WordPress WP Reset PRO Premium plugin (versions <= 5.98) allows any authenticated user to wipe the entire database regardless of their authorization. It leads to a complete website reset and takeover.CVE-2021-36908webfactory ltd.wp reset pro+2EPSS score0.71%
Cross-Site Request Forgery (CSRF) vulnerability in WebFactory Ltd. WP Reset PRO plugin <= 5.98 versions.CVE-2023-48745webfactory ltdcaptcha code+1EPSS score0.35%
Improper Restriction of Excessive Authentication Attempts vulnerability in WebFactory Ltd Captcha Code allows Functionality Bypass.This issue affects Captcha Code: from n/a through 2.9.CVE-2023-49747webfactory ltdguest author+2EPSS score0.37%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebFactory Ltd Guest Author allows Stored XSS.This issue affects Guest Author: from n/a through 2.3.CVE-2023-50837webfactory ltdlogin lockdown – protect login form+2EPSS score0.58%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WebFactory Ltd Login Lockdown – Protect Login Form.This issue affects Login Lockdown – Protect Login Form: from n/a through 2.06.