Vendors / Arevico Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Arevico records in CISA KEV No Arevico vulnerabilities are listed in CISA KEV.
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arevico WP Simple Redirect wp-simple-redirect allows Reflected XSS.This issue affects WP Simple Redirect: from n/a thr…
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00213 · Published 2026-01-22 · No fix listed CWE-79
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arevico WP Tactical Popup wp-tactical-popup allows Reflected XSS.This issue affects WP Tactical Popup: from n/a throug…
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.0025 · Published 2025-10-22 · No fix listed CWE-79
Priority LOW 25
The Multi Functional Flexi Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `arv_lb[message]` parameter in all versions up to, and including, 1.2 due to insufficient input sanitization a…
CVSS 3.1 MEDIUM 5.5· Network · High privileges · No interaction · EPSS 0.00276 · Published 2026-03-21 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 2 1 0 0
