Read the docs

anmari

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

anmari records in CISA KEV

No anmari vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Amr Users 2 records MEDIUM

Records

5 records

TI-2022-00989 CVE-2022-1094 · GHSA-27cc-h22h-f622

Amr Users < 4.59.4 - Admin+ Stored Cross-Site Scripting

Priority MEDIUM 55

The amr users WordPress plugin before 4.59.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00615 Published 2022-04-25 Fixed in 4.59.4 CWE-79
TI-2022-22314 CVE-2022-45348 · GHSA-7wqv-9w75-qfxv

WordPress amr users Plugin <= 4.59.4 is vulnerable to CSV Injection

Priority MEDIUM 41

Improper Neutralization of Formula Elements in a CSV File vulnerability in anmari amr users.This issue affects amr users: from n/a through 4.59.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00779 Published 2023-11-07 No fix listed CWE-1236
TI-2025-42307 CVE-2025-68848 · GHSA-rv4c-25xc-4f6g

WordPress amr cron manager plugin <= 2.3 - Reflecte dCross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in anmari amr cron manager amr-cron-manager allows Reflected XSS.This issue affects amr cron manager: from n/a through <=…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00208 Published 2026-02-20 No fix listed CWE-79
TI-2025-17647 CVE-2025-23880 · GHSA-7qq9-4vv8-hgrv

WordPress amr personalise plugin <= 2.10 - CSRF to Stored XSS vulnerability

Priority LOW 31

Cross-Site Request Forgery (CSRF) vulnerability in anmari amr personalise amr-personalise allows Cross Site Request Forgery.This issue affects amr personalise: from n/a through <= 2.10.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00211 Published 2025-01-16 No fix listed CWE-352
Open these records in search →