Vendors / codevibrant Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 3
Exploited now codevibrant records in CISA KEV No codevibrant vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 42
The WP Blog Post Layouts plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.1.3.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00822 · Published 2024-06-21 · No fix listed CWE-98
Priority LOW 37
Cross-Site Request Forgery (CSRF) vulnerability in CodeVibrant Maintenance Notice maintenance-notice allows Cross Site Request Forgery.This issue affects Maintenance Notice: from n/a through <= 1.0.6.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00195 · Published 2025-03-11 · No fix listed CWE-352
Priority LOW 36
The WP Magazine Modules Lite plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.1.2 via the 'blockLayout' parameter.
CVSS 3.1 HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00758 · Published 2024-06-19 · No fix listed CWE-98
Open these records in search → All records by CVSS severity
0 3 0 0 0
THREATIST.IORead the docs