CVE-2025-24737
- EPSS 0.25%
- Veröffentlicht 17.04.2025 15:48:12
- Zuletzt bearbeitet 23.04.2026 15:25:24
Missing Authorization vulnerability in Mat Bao Corporation WP Helper Premium wp-helper-lite allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Helper Premium: from n/a through <= 4.6.1.
CVE-2024-9065
- EPSS 0.38%
- Veröffentlicht 10.10.2024 02:15:04
- Zuletzt bearbeitet 08.04.2026 18:22:48
The WP Helper Premium plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'whp_smtp_send_mail_test' function in all versions up to, and including, 4.6.1. This makes it possible for unauthen...
CVE-2024-32595
- EPSS 0.39%
- Veröffentlicht 18.04.2024 09:15:13
- Zuletzt bearbeitet 28.04.2026 19:24:50
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mat Bao Corp WP Helper Premium allows Reflected XSS.This issue affects WP Helper Premium: from n/a before 4.6.0.
CVE-2023-46614
- EPSS 0.26%
- Veröffentlicht 09.11.2023 18:15:07
- Zuletzt bearbeitet 28.04.2026 19:21:43
Cross-Site Request Forgery (CSRF) vulnerability in Mat Bao Corp WP Helper Premium plugin <= 4.5.1 versions.
CVE-2023-0448
- EPSS 44.51%
- Veröffentlicht 26.01.2023 21:18:08
- Zuletzt bearbeitet 02.04.2025 14:15:36
The WP Helper Lite WordPress plugin, in versions < 4.3, returns all GET parameters unsanitized in the response, resulting in a reflected cross-site scripting vulnerability.