Skip to content

Known CVE

WordPress Guppy <=1.1 - Information Disclosure

WordPress Guppy plugin through 1.1 is susceptible to an API disclosure vulnerability. This can allow an attacker to obtain all user IDs and then use them to make API requests to get messages sent between users and/or send messages posing as one user to another.

CVE-2021-24997

Medium2021CVSS 6.5CWE-862

cve2021 · wordpress · guppy · api · wp-plugin · edb · wpscan · wp-guppy

Verified scans run this check after you prove you own the site.

All known CVEsView the checks catalogNational Vulnerability Database

Scan a website