captivateaudio

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

captivateaudio records in CISA KEV

No captivateaudio vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2025-37587 CVE-2025-60221 · GHSA-wvwj-rfxp-q9cw

WordPress Captivate Sync Plugin <= 3.0.3 - PHP Object Injection Vulnerability

MEDIUM 50

Deserialization of Untrusted Data vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Object Injection.This issue affects Captivate Sync: from n/a through <= 3.0.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00581 Published 2025-10-22 No fix listed CWE-502

TI-2026-44361 CVE-2026-62060 · GHSA-gc7r-mx54-m2v7

WordPress Captivate Sync plugin <= 3.3.2 - SQL Injection vulnerability

LOW 33

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Blind SQL Injection.This issue affects Captivate Sync: from n…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00226 Published 2026-10-01 No fix listed CWE-89

TI-2025-42091 CVE-2025-68570 · GHSA-xv67-vhc4-3v47

WordPress Captivate Sync plugin <= 3.2.2 - SQL Injection vulnerability

LOW 33

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00331 Published 2025-12-24 No fix listed CWE-89

TI-2024-36018 CVE-2024-53820 · GHSA-fc75-978w-cw6p

WordPress Captivate Sync plugin <= 2.0.22 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Stored XSS.This issue affects Captivate Sync: from n/a throug…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00253 Published 2024-12-06 No fix listed CWE-79

Open these records in search →

Critical	1
High	2
Medium	1
Low	0
No CVSS	0