Browse all 4 CVE security advisories affecting Typps. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Typps is a web application primarily used for content management and publishing, with its core functionality centered around creating and managing digital content. Historically, typps has been associated with multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues, as evidenced by its four recorded CVEs. The application's security posture has been marked by insufficient input validation and inadequate access controls, leading to several critical exposures. While no major public security incidents have been widely documented, the consistent pattern of vulnerabilities in typps suggests ongoing challenges in secure development practices, particularly in handling user-supplied data and implementing proper authentication mechanisms.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2024-30534 | WordPress Calendarista Basic Edition plugin <= 3.0.5 - Broken Access Control vulnerability — Calendarista Basic EditionCWE-862 | 6.5 | Medium | 2024-06-09 |
| CVE-2024-31942 | WordPress Calendarista Basic Edition plugin <= 3.0.2 - Cross Site Request Forgery (CSRF) vulnerability — Calendarista Basic EditionCWE-352 | 4.3 | Medium | 2024-04-15 |
| CVE-2024-27993 | WordPress Calendarista Basic Edition plugin <= 3.0.2 - Cross Site Scripting (XSS) vulnerability — Calendarista Basic EditionCWE-79 | 7.1 | High | 2024-03-21 |
This page lists every published CVE security advisory associated with Typps. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.