CyberSecBulletin

Nouthemes vulnerabilities

We track 2 vulnerabilities in Nouthemes products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 9, 2024.

2vulnerabilities
1critical
1high
0exploited
8.4average CVSS score

Latest Nouthemes vulnerabilities

  • 9.8 Critical severity

    Leopard - WordPress Offload Media: Missing Authorization

    CVE-2024-10589Nouthemes

    The Leopard - WordPress Offload Media plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the import_settings() function in all versions up to, and including, 3.1.1.

  • 7.1 High severity

    Leopard - WordPress offload media: Missing Authorization

    CVE-2024-43256Nouthemes

    Missing Authorization vulnerability in nouthemes Leopard - WordPress offload media allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Leopard - WordPress offload media: from n/a through 2.0.36.