wp-master CVE Vulnerabilities & Metrics

Focus on wp-master vulnerabilities and metrics.

Last updated: 24 Jun 2025, 22:25 UTC

About wp-master Security Exposure

This page consolidates all known Common Vulnerabilities and Exposures (CVEs) associated with wp-master. We track both calendar-based metrics (using fixed periods) and rolling metrics (using gliding windows) to give you a comprehensive view of security trends and risk evolution. Use these insights to assess risk and plan your patching strategy.

For a broader perspective on cybersecurity threats, explore the comprehensive list of CVEs by vendor and product. Stay updated on critical vulnerabilities affecting major software and hardware providers.

Global CVE Overview

Total wp-master CVEs: 3
Earliest CVE date: 23 Jan 2023, 15:15 UTC
Latest CVE date: 25 Jun 2024, 06:15 UTC

Latest CVE reference: CVE-2024-4757

Rolling Stats

30-day Count (Rolling): 0
365-day Count (Rolling): 1

Calendar-based Variation

Calendar-based Variation compares a fixed calendar period (e.g., this month versus the same month last year), while Rolling Growth Rate uses a continuous window (e.g., last 30 days versus the previous 30 days) to capture trends independent of calendar boundaries.

Variations & Growth

Month Variation (Calendar): 0%
Year Variation (Calendar): 0%

Month Growth Rate (30-day Rolling): 0.0%
Year Growth Rate (365-day Rolling): 0.0%

Monthly CVE Trends (current vs previous Year)

Annual CVE Trends (Last 20 Years)

Critical wp-master CVEs (CVSS ≥ 9) Over 20 Years

CVSS Stats

Average CVSS: 0.0

Max CVSS: 0

Critical CVEs (≥9): 0

CVSS Range vs. Count

Range Count
0.0-3.9 3
4.0-6.9 0
7.0-8.9 0
9.0-10.0 0

CVSS Distribution Chart

Top 5 Highest CVSS wp-master CVEs

These are the five CVEs with the highest CVSS scores for wp-master, sorted by severity first and recency.

All CVEs for wp-master

CVE-2024-4757 wp-master vulnerability CVSS: 0 25 Jun 2024, 06:15 UTC

The Logo Manager For Enamad WordPress plugin through 0.7.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack

CVE-2023-25795 wp-master vulnerability CVSS: 0 20 Mar 2023, 11:15 UTC

Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in WP-master.Ir Feed Changer & Remover plugin <= 0.2 versions.

CVE-2022-4307 wp-master vulnerability CVSS: 0 23 Jan 2023, 15:15 UTC

The پلاگین پرداخت دلخواه WordPress plugin before 2.9.3 does not sanitise and escape some parameters, allowing unauthenticated attackers to send a request with XSS payloads, which will be triggered when a high privilege users such as admin visits a page from the plugin.