Read the docs

Arefly

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Arefly records in CISA KEV

No Arefly vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2025-22635 CVE-2025-31454 · GHSA-pq7c-rw4g-fc5q

WordPress Delete Post Revision plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arefly Delete Post Revision delete-post-revision allows Reflected XSS.This issue affects Delete Post Revision: from n/…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00393 Published 2025-04-01 No fix listed CWE-79
TI-2025-21850 CVE-2025-30575 · GHSA-vmm2-mj96-p4p6

WordPress Login Redirect plugin <= - 1.0.5 Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arefly Login Redirect login-redirect allows Stored XSS.This issue affects Login Redirect: from n/a through <= 1.0.5.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00354 Published 2025-03-24 No fix listed CWE-79
TI-2025-16465 CVE-2025-22579 · GHSA-rw3m-wxjr-rg26

WordPress WP Header Notification plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arefly WP Header Notification wp-header-notification allows Stored XSS.This issue affects WP Header Notification: from…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00228 Published 2025-01-07 No fix listed CWE-79
Open these records in search →