metagauss Vulnerabilities and Affected Products
Vulnerabilities associated with Download Theme.
Products
Clear product- ProfileGrid25 vulnerabilities
- ProfileGrid – User Profiles, Groups and Communities25 vulnerabilities
- RegistrationMagic21 vulnerabilities
- EventPrime – Events Calendar, Bookings and Tickets17 vulnerabilities
- EventPrime15 vulnerabilities
- RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login15 vulnerabilities
- Download Plugin3 vulnerabilities
- Download Theme1 vulnerability
- Event Kikfyre1 vulnerability
- Memberships and User Profiles for WooCommerce – ProfileGrid WooCommerce Integration1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2022-38062MEDIUM | WordPress Download Theme Plugin <= 1.0.9 is vulnerable to Cross Site Request Forgery (CSRF)Cross-Site Request Forgery (CSRF) vulnerability in Metagauss Download Theme plugin <= 1.0.9 versions. CWE-352Jul 17, 2023 | CVSS4.3v3.1 | EPSS0.256% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |