← Back

Matbao

matbao

3 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Wp Helper Premium
wp_helper_premium
3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-9065
1Matbao
1Wp Helper Premium
Jun 17, 2026
Oct 10, 2024
N/A· v4
5.3 MEDIUM· v3
N/A· v2
The WP Helper Premium plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'whp_smtp_send_mail_test' function in all versions up to, and including, 4.6.1. This...Show more
The WP Helper Premium plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'whp_smtp_send_mail_test' function in all versions up to, and including, 4.6.1. This makes it possible for unauthenticated attackers to send emails containing any content and originating from the vulnerable WordPress instance to any recipient. CVE-2025-24737 is likely a duplicate of this issue.Show less
CVE-2023-46614
1Matbao
1Wp Helper Premium
Jun 17, 2026
Nov 9, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Cross-Site Request Forgery (CSRF) vulnerability in Mat Bao Corp WP Helper Premium plugin <= 4.5.1 versions.
CVE-2023-0448
1Matbao
1Wp Helper Premium
Jun 17, 2026
Jan 26, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
The WP Helper Lite WordPress plugin, in versions < 4.3, returns all GET parameters unsanitized in the response, resulting in a reflected cross-site scripting vulnerability.