Web3 vulnerabilities
We track 2 vulnerabilities in Web3 products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 25, 2024.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest Web3 vulnerabilities
- 7.5 High severity
web3-utils: Improperly Controlled Modification of Object Prototype Attributes
Versions of the package web3-utils before 4.2.1 are vulnerable to Prototype Pollution via the utility functions format and mergeDeep, due to insecure recursive merge. An attacker can manipulate an object's prototype, potentially leading to the alteration of th
- 9.8 Critical severity
Web3: Incorrect Authorization
The Web3 WordPress plugin before 3.0.0 is vulnerable to an authentication bypass due to incorrect authentication checking in the login flow in functions 'handle_auth_request' and 'hadle_login_request'. This makes it possible for non authenticated attackers to