a3rev

Records16All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

a3rev records in CISA KEV

No a3rev vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Page View Count 5 records MEDIUM Contact Us Page - Contact People 2 records LOW A3 Portfolio 1 record LOW

Records

2 records in Contact Us Page - Contact People · all components

TI-2025-04592 CVE-2025-5123 · GHSA-j6hc-pqg8-chf5

Contact Us Page – Contact People <= 3.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via style Parameter

LOW 28

The Contact Us Page – Contact People plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘style’ parameter in all versions up to, and including, 3.7.4 due to insufficient input sanitization and outp…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00246 Published 2025-06-13 No fix listed CWE-79

TI-2023-09760 CVE-2023-23973 · GHSA-3pqj-4h6v-gq86

WordPress Contact Us page - Contact people LITE Plugin <= 3.7.0 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 28

Cross-Site Request Forgery (CSRF) vulnerability in a3rev Software Contact Us Page – Contact People plugin <= 3.7.0.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00237 Published 2023-03-01 No fix listed CWE-352

Open these records in search →

Critical	1
High	3
Medium	12
Low	0
No CVSS	0