Kaswara Project Kaswara
2 CVEs affecting Kaswara Project Kaswara. Latest disclosed: 2024-10-16. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-24284 | Critical | 9.8 | 2021-05-14 | The Kaswara Modern VC Addons WordPress plugin through 3.0.1 allows unauthenticated arbitrary file upload via the 'uploadFontIcon' AJAX action. The supplied zip… |
CVE-2021-4448 | High | 7.3 | 2024-10-16 | The Kaswara Modern VC Addons plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 3.0.1 due to insufficient capability… |