HelloAsso

Products

ProductCVEsExploitedLatest
HelloAsso5–Jan 24, 2025

Exploited and recent CVEs

  • CVE-2025-24575 Medium 6.5 WordPress HelloAsso plugin <= 1.1.11 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2024-44052 Medium 4.3 WordPress HelloAsso plugin <= 1.1.10 - Broken Access Control vulnerability 0.3%
  • CVE-2024-7605 Medium 4.3 HelloAsso <= 1.1.10 - Missing Authorization to Authenticated (Contributor+) Limited Options Update 0.4%
  • CVE-2024-37488 Medium 6.5 WordPress HelloAsso plugin <= 1.1.9 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-32697 Medium 6.5 WordPress HelloAsso plugin <= 1.1.5 - Cross Site Scripting (XSS) vulnerability 0.3%