Read the docs

aleapp

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

aleapp records in CISA KEV

No aleapp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Csv Mass Importer 1 record HIGH

Records

2 records

TI-2025-03725 CVE-2025-4190 · GHSA-7rm6-cjw9-cf8v

CSV Mass Importer <= 1.2 - Admin+ Arbitrary File Upload

Priority HIGH 67

The CSV Mass Importer WordPress plugin through 1.2 does not properly validate uploaded files, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (f…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00581 Published 2025-05-17 No fix listed
TI-2025-17588 CVE-2025-23821 · GHSA-7c44-rwr9-95rp

WordPress WP Cookies Alert plugin <= 1.1.1 - CSRF to Stored XSS vulnerability

Priority LOW 31

Cross-Site Request Forgery (CSRF) vulnerability in aleapp WP Cookies Alert wp-cookies-alert allows Cross Site Request Forgery.This issue affects WP Cookies Alert: from n/a through <= 1.1.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00211 Published 2025-01-16 No fix listed CWE-352
Open these records in search →