Read the docs

Andreafarracani

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Andreafarracani records in CISA KEV

No Andreafarracani vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wowpth 2 records MEDIUM

Records

2 records in Wowpth · all components

TI-2025-01277 CVE-2025-1487 · GHSA-mcp2-9qpg-mmvj

WoWPth <= 2.0 - Reflected XSS

Priority MEDIUM 64

The WoWPth WordPress plugin through 2.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00274 Published 2025-03-13 No fix listed CWE-79
TI-2025-01276 CVE-2025-1486 · GHSA-66q2-c4x8-8x2c

WoWPth <= 2.0 - Reflected XSS

Priority MEDIUM 64

The WoWPth WordPress plugin through 2.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00274 Published 2025-03-13 No fix listed CWE-79
Open these records in search →