Skip to content
OpenAdvisories

Vendor

creativeon

4 known vulnerabilities.

Products

WHMpress 2 WHMpress - WHMCS WordPress Integration Plugin 1 WHMCS Client Area for WordPress by WHMpress 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2024-9195

    WHMPress - WHMCS Client Area <= 4.3-revision-3- Authenticated (Subscriber+) Arbitrary Options Update

    The WHMPress - WHMCS Client Area plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the update_settings case in the /admin/ajax.php file in all versions up to, and…

    creativeon WHMCS Client Area for WordPress by WHMpress Web / CMS
  • High 8.8
    CVE-2024-43247

    WordPress WHMpress plugin <= 6.2-revision-5 - Subscriber+ Arbitrary Settings Change vulnerability

    Missing Authorization vulnerability in creativeon WHMpress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WHMpress: from n/a through 6.2-revision-5.

    creativeon WHMpress
  • High 7.1
    CVE-2024-43246

    WordPress WHMpress plugin <= 6.2-revision-5 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in creativeon WHMpress allows Reflected XSS.This issue affects WHMpress: from n/a through 6.2-revision-5.

    creativeon WHMpress