Read the docs

CleverReach®

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

CleverReach® records in CISA KEV

No CleverReach® vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2025-41643 CVE-2025-68034 · GHSA-3cxv-pxqj-hqq3

WordPress CleverReach® WP plugin <= 1.5.21 - SQL Injection vulnerability

Priority MEDIUM 47

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CleverReach® CleverReach® WP cleverreach-wp allows SQL Injection.This issue affects CleverReach® WP: from n/a through…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00481 Published 2026-01-22 No fix listed CWE-89
TI-2025-31174 CVE-2025-49059 · GHSA-5w3r-75pc-x5cx

WordPress CleverReach® WP Plugin <= 1.5.20 - SQL Injection Vulnerability

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CleverReach® CleverReach® WP cleverreach-wp allows SQL Injection.This issue affects CleverReach® WP: from n/a through…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00329 Published 2025-08-14 No fix listed CWE-89
TI-2025-23338 CVE-2025-32241 · GHSA-4vq9-542f-qfqx

WordPress Official CleverReach WooCommerce Integration plugin <= 3.4.6 - CSRF to Settings Change vulnerability

Priority LOW 35

Cross-Site Request Forgery (CSRF) vulnerability in CleverReach® Official CleverReach Plugin for WooCommerce cleverreach-wc allows Cross Site Request Forgery.This issue affects Official CleverReach Plugin for WooCommerce:…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00285 Published 2025-04-04 No fix listed CWE-352
Open these records in search →