Vendors / ben.moody Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 3 CVSS 7.0–8.9
Exploited now ben.moody records in CISA KEV No ben.moody vulnerabilities are listed in CISA KEV.
Priority LOW 37
The Content Syndication Toolkit plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.3 via the redux_p AJAX action in the bundled ReduxFramework library.
CVSS 3.1 HIGH 7.2· Network · No auth · No interaction · EPSS 0.00288 · Published 2026-03-21 · No fix listed CWE-918
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ben.moody SrcSet Responsive Images for WordPress truenorth-srcset allows Reflected XSS.This issue affects SrcSet Respo…
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00304 · Published 2024-11-09 · No fix listed CWE-79
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ben.moody Content Syndication Toolkit Reader content-syndication-toolkit-reader allows Reflected XSS.This issue affect…
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00304 · Published 2024-11-09 · No fix listed CWE-79
Priority LOW 30
The WP Headless CMS Framework plugin for WordPress is vulnerable to protection mechanism bypass in all versions up to, and including, 1.15.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0036 · Published 2025-11-13 · No fix listed CWE-693
Open these records in search → All records by CVSS severity
Critical0 High3 Medium1 Low0 No CVSS0