CriticalCVSS 9.8
EPSS 0.56%
Unauthenticated PHP Object Injection in FundEngine <= 1.7.9 versions.
Product
roxnor FundEngine vulnerabilities
6 published CVES affecting roxnor FundEngine, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 6
- Critical
- 2
- High
- 1
- Medium
- 3
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest roxnor FundEngine CVEs
Newest publication first
-
-
CriticalCVSS 9.8 EPSS 0.56%
Unauthenticated PHP Object Injection in FundEngine <= 1.7.9 versions.
-
MediumCVSS 6.5 EPSS 0.37%
Subscriber Broken Access Control in FundEngine <= 1.7.8 versions.
-
MediumCVSS 6.5 EPSS 0.33%
Missing Authorization vulnerability in Roxnor FundEngine wp-fundraising-donation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FundEngine: from n/a through <= 1.7.6.
-
HighCVSS 7.5 EPSS 0.67%
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Roxnor FundEngine wp-fundraising-donation allows PHP Local File Inclusion.This issue affects FundEngine: from n/a through <= 1.7.4.
-
MediumCVSS 4.3 EPSS 0.17%
Cross-Site Request Forgery (CSRF) vulnerability in Roxnor FundEngine wp-fundraising-donation allows Cross Site Request Forgery.This issue affects FundEngine: from n/a through <= 1.7.3.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.