0mk Shortener Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

0mk Shortener Project records in CISA KEV

No 0mk Shortener Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2022-02713 CVE-2022-2933 · GHSA-5fh2-9qj6-98rq

MEDIUM 41

The 0mk Shortener plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.2.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00512 Published 2023-02-06 No fix listed CWE-352

TI-2022-22327 CVE-2022-45361 · GHSA-gh9g-ghf4-75r3

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Boris Kuzmanov 0mk Shortener plugin <= 0.2 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00394 Published 2023-04-23 No fix listed CWE-79