2-Plan

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

2-Plan records in CISA KEV

No 2-Plan vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2018-15387 CVE-2018-25162 · GHSA-mr8v-9m78-w527

2-Plan Team 1.0.4 Arbitrary File Upload via managefile.php

MEDIUM 64

2-Plan Team 1.0.4 contains an arbitrary file upload vulnerability that allows authenticated attackers to upload executable PHP files by sending multipart form data to managefile.php.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00516 Published 2026-03-06 No fix listed CWE-434

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0