Read the docs

Alexander

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Alexander records in CISA KEV

No Alexander vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2025-30461 CVE-2025-48091 · GHSA-x74j-4vxg-f3r7

WordPress AnyComment plugin <= 0.3.6 - SQL Injection vulnerability

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alexander AnyComment anycomment allows SQL Injection.This issue affects AnyComment: from n/a through <= 0.3.6.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00423 Published 2025-10-22 No fix listed CWE-89
TI-2025-37606 CVE-2025-60240 · GHSA-5pmp-9cc5-cc5f

WordPress AnyComment plugin <= 0.3.6 - Local File Inclusion vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Alexander AnyComment anycomment allows PHP Local File Inclusion.This issue affects AnyComment: from…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00461 Published 2025-11-06 No fix listed CWE-98
TI-2025-39024 CVE-2025-62874 · GHSA-mrvp-jf7m-h2rh

WordPress AnyComment plugin <= 0.3.6 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in Alexander AnyComment anycomment allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AnyComment: from n/a through <= 0.3.6.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00295 Published 2025-12-31 No fix listed CWE-862
Open these records in search →