Read the docs

aerin

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

aerin records in CISA KEV

No aerin vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-04999 CVE-2026-5694 · GHSA-rqwq-3pw2-jcpx

Quick Interest Slider <= 3.1.5 - Unauthenticated Stored Cross-Site Scripting

Priority LOW 37

The Quick Interest Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'loan-amount' and 'loan-period' parameters in all versions up to, and including, 3.1.5 due to insufficient input sanitiz…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00312 Published 2026-04-15 No fix listed CWE-79
TI-2024-11875 CVE-2024-12814 · GHSA-63pf-rx8v-wjx4

Loan Comparison <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 29

The Loan Comparison plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'loancomparison' shortcode in all versions up to, and including, 2.0 due to insufficient input sanitization and outpu…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00435 Published 2024-12-24 No fix listed CWE-79
Open these records in search →