Andrew

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Andrew records in CISA KEV

No Andrew vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-28670 CVE-2026-39701 · GHSA-gx25-j3v5-rjj3

WordPress ShopWP plugin <= 5.2.4 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in Andrew ShopWP wpshopify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ShopWP: from n/a through <= 5.2.4.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0024 Published 2026-04-08 No fix listed CWE-862

TI-2024-20748 CVE-2024-31376 · GHSA-jv3v-w3r5-rrcc

WordPress Dashboard To-Do List plugin <= 1.3.1 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Andrew Dashboard To-Do List dashboard-to-do-list.This issue affects Dashboard To-Do List: from n/a through <= 1.3.1.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00202 Published 2024-04-15 No fix listed CWE-352

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0