Approved changes feed: RSS · Atom
cpe:2.3:a:wpsight:wpcasa:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Wpsight (5c113306-f9ca-5ecf-ba0d-0da32d66b9cd) |
|---|---|
| Product | Wpcasa (48560ce9-b465-5945-beb9-73ee700e3161) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-9321 |
vulnerable | 2026-06-08 07:45:22.288807 |
WPCasa <= 1.4.1 - Unauthenticated Code Injection
CRITICAL (9.8)
The WPCasa plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 1.4.1. This is due to insufficient input validation and restriction on the 'api_requests' function. This makes it possible for unauthenticated attackers to call arbitrary functions and execute code.
Published: 2025-09-23T04:26:13.615Z
Updated: 2026-04-08T17:19:45.258Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62043 |
vulnerable | 2026-06-08 07:37:28.569376 |
WordPress WPCasa plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in WPSight WPCasa allows DOM-Based XSS.This issue affects WPCasa: from n/a through 1.4.1.
Published: 2026-03-19T08:25:18.077Z
Updated: 2026-04-28T16:13:59.624Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-39575 |
vulnerable | 2026-06-08 07:23:06.785736 |
WordPress WPCasa plugin <= 1.3.2 - Cross Site Scripting (XSS) Vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPSight WPCasa wpcasa allows Stored XSS.This issue affects WPCasa: from n/a through <= 1.3.2.
Published: 2025-04-16T12:44:27.436Z
Updated: 2026-04-28T16:12:34.977Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-53826 |
vulnerable | 2026-06-08 06:54:15.600244 |
WordPress WPCasa plugin <= 1.2.13 - Insecure Direct Object References (IDOR) vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in WPSight WPCasa wpcasa allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPCasa: from n/a through <= 1.2.13.
Published: 2024-12-06T13:18:31.922Z
Updated: 2026-04-28T16:10:47.160Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.