Lucene search

Activedemand Security Vulnerabilities - November

cve

CVE-2022-36296

Broken Authentication vulnerability in JumpDEMAND Inc. ActiveDEMAND plugin <= 0.2.27 at WordPress allows unauthenticated post update/create/delete.

6.5CVSS

5.5AI Score

0.001EPSS

2022-08-05 04:15 PM

cve

CVE-2024-32809

Unrestricted Upload of File with Dangerous Type vulnerability in JumpDEMAND Inc. ActiveDEMAND allows Using Malicious Files.This issue affects ActiveDEMAND: from n/a through 0.2.41.

10CVSS

6.8AI Score

0.0004EPSS

2024-05-17 10:15 AM