Vendors / absikandar Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now absikandar records in CISA KEV No absikandar vulnerabilities are listed in CISA KEV.
Priority LOW 19
The Frontend User Notes plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.1.
CVSS 3.1 MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00132 · Published 2026-06-05 · No fix listed CWE-352
Priority LOW 19
The Frontend User Notes plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.1.0 via the 'funp_ajax_modify_notes' AJAX endpoint due to missing validation on a use…
CVSS 3.1 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00184 · Published 2026-02-18 · No fix listed CWE-639
Open these records in search → All records by CVSS severity
Critical0 High0 Medium2 Low0 No CVSS0