Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Brinidesigner records in CISA KEVNo Brinidesigner vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 36
Unauthenticated Plugin Settings Change vulnerability in Awesome Filterable Portfolio plugin <= 1.9.7 at WordPress.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00715 · Published 2022-09-23 · No fix listed CWE-264
Priority LOW 35
The awesome-filterable-portfolio plugin before 1.9 for WordPress has afp_get_new_portfolio_item_page SQL injection via the item_id parameter.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01918 · Published 2019-10-10 · No fix listed CWE-89
Priority LOW 28
Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability in Awesome Filterable Portfolio plugin <= 1.9.7 at WordPress.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00619 · Published 2022-09-23 · No fix listed CWE-79
Open these records in search →