Read the docs

bittokazi

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

bittokazi records in CISA KEV

No bittokazi vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2025-31145 CVE-2025-49029 · GHSA-4mv9-2h4p-3hrx

WordPress Custom Login And Signup Widget plugin <= 1.0 - Arbitrary Code Execution vulnerability

Priority MEDIUM 46

Improper Control of Generation of Code ('Code Injection') vulnerability in bitto.kazi Custom Login And Signup Widget custom-login-and-signup-widget allows Code Injection.This issue affects Custom Login And Signup Widget:…

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.02359 Published 2025-07-01 No fix listed CWE-94
TI-2025-02181 CVE-2025-2510 · GHSA-v8f4-5r7f-6q9r

Frndzk Expandable Bottom Bar <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via text Parameter

Priority LOW 24

The Frndzk Expandable Bottom Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'text' parameter in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping…

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00248 Published 2025-03-25 No fix listed CWE-79
TI-2025-09072 CVE-2025-9887 · GHSA-7hv7-86v4-mgxw

Custom Login And Signup Widget <= 1.0 - Cross-Site Request Forgery

Priority LOW 19

The Custom Login And Signup Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0014 Published 2025-09-20 No fix listed CWE-352
Open these records in search →