VendorsWicked Pluginswicked_foldersall versions
Vulnerabilities

Wicked Plugins Wicked Folders

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

21CVEs
CVE-2021-24919
Wicked Folders < 2.18.10 - Subscriber+ SQL Injection
Published 2022-02-01 · Modified
8.8EPSS 0.015
CVE-2023-0719
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_sort_order
Published 2023-02-07 · Modified
5.4EPSS 0.006
CVE-2023-0712
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_move_object
Published 2023-02-07 · Modified
5.4EPSS 0.006
CVE-2023-0718
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_folder
Published 2023-02-07 · Modified
5.4EPSS 0.006
CVE-2023-0684
Wicked Folders <= 2.18.16 - Missing Authorization via ajax_unassign_folders
Published 2023-02-08 · Modified
5.4EPSS 0.006
CVE-2023-0720
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_folder_order
Published 2023-02-08 · Modified
5.4EPSS 0.006
CVE-2023-0717
Wicked Folders <= 2.18.16 - Missing Authorization via ajax_delete_folder
Published 2023-02-08 · Modified
5.4EPSS 0.006
CVE-2023-0716
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_edit_folder
Published 2023-02-08 · Modified
5.4EPSS 0.006
CVE-2023-0715
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_clone_folder
Published 2023-02-08 · Modified
5.4EPSS 0.006
CVE-2023-0713
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_add_folder
Published 2023-02-07 · Modified
5.4EPSS 0.006
CVE-2023-0711
Wicked Folders <= 2.18.16 - Missing Authorization via ajax_save_state
Published 2023-02-08 · Modified
5.4EPSS 0.006
CVE-2023-0723
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery on ajax_move_object
Published 2023-02-07 · Modified
5.4EPSS 0.003
CVE-2023-0727
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_delete_folder
Published 2023-02-07 · Modified
5.4EPSS 0.003
CVE-2023-0730
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_folder_order
Published 2023-02-07 · Modified
5.4EPSS 0.003
CVE-2023-0728
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery on ajax_save_folder
Published 2023-02-07 · Modified
5.4EPSS 0.003
CVE-2023-0685
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_unassign_folders
Published 2023-02-08 · Modified
5.4EPSS 0.003
CVE-2023-0722
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_state
Published 2023-02-08 · Modified
5.4EPSS 0.003
CVE-2023-0724
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_add_folder
Published 2023-02-08 · Modified
5.4EPSS 0.003
CVE-2023-0725
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_clone_folder
Published 2023-02-08 · Modified
5.4EPSS 0.003
CVE-2023-0726
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_edit_folder
Published 2023-02-08 · Modified
5.4EPSS 0.003
CVE-2023-0729
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_sort_order
Published 2023-06-09 · Modified
5.4EPSS 0.003