Vendors / Alex Raven Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 3 CVSS 7.0–8.9
Exploited now Alex Raven records in CISA KEV No Alex Raven vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 40
Cross-Site Request Forgery (CSRF) vulnerability in Alex Raven WP Report Post plugin <= 2.1.2 versions.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00301 · Published 2023-11-09 · No fix listed CWE-352
Priority MEDIUM 40
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alex Raven WP Report Post allows SQL Injection.This issue affects WP Report Post: from n/a through 2.1.2.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00902 · Published 2023-12-18 · No fix listed CWE-89
Priority LOW 32
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Alex Raven WP Report Post plugin <= 2.1.2 versions.
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00548 · Published 2023-10-24 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
Critical0 High3 Medium0 Low0 No CVSS0