Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
CodeAndMore records in CISA KEVNo CodeAndMore vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 24
Cross-Site Request Forgery (CSRF) vulnerability in CodeAndMore WP Page Widget plugin <= 3.9 on WordPress leading to plugin settings change.
CVSS 3.1MEDIUM 5.4· Network · No auth · User interaction · EPSS 0.00337 · Published 2022-11-08 · No fix listed CWE-352
Open these records in search →