Aviplugins

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Aviplugins records in CISA KEV

No Aviplugins vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Wp Register Profile With Shortcode · all components

TI-2023-05014 CVE-2023-5448 · GHSA-q4j6-9v4c-h9vq

MEDIUM 40

The WP Register Profile With Shortcode plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.5.9.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00321 Published 2024-01-11 No fix listed CWE-352

TI-2023-09617 CVE-2023-23818 · GHSA-682v-v4hm-9r6v

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Aviplugins.Com WP Register Profile With Shortcode plugin <= 3.5.7 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-06-12 No fix listed CWE-79