Vendors / coffee2code Records 12 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 0
Exploited now coffee2code records in CISA KEV No coffee2code vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 50
Improper Neutralization of Formula Elements in a CSV File vulnerability in Scott Reilly Commenter Emails.This issue affects Commenter Emails: from n/a through 2.6.1.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00611 · Published 2023-11-07 · No fix listed CWE-1236
Priority LOW 31
The Reveal Template plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.7.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00534 · Published 2024-08-09 · No fix listed CWE-200
Priority LOW 31
The Obfuscate Email plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.8.1.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00482 · Published 2024-08-09 · No fix listed CWE-200
Priority LOW 31
The Linkify Text plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.9.1.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00482 · Published 2024-08-09 · No fix listed CWE-200
Priority LOW 30
The Remember Me Controls plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.0.1.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00439 · Published 2024-09-06 · No fix listed CWE-200
Priority LOW 30
The Admin Post Navigation plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.1.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00423 · Published 2024-07-27 · No fix listed CWE-200
Priority LOW 30
The Add Admin JavaScript plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.0.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00373 · Published 2024-07-27 · No fix listed CWE-200
Priority LOW 30
The One Click Close Comments plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.7.1.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00448 · Published 2024-07-27 · No fix listed CWE-200
Priority LOW 30
The Admin Trim Interface plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.5.1.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00373 · Published 2024-07-27 · No fix listed CWE-200
Priority LOW 30
The Custom Post Limits plugin for WordPress is vulnerable to full path disclosure in all versions up to, and including, 4.4.1.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00396 · Published 2024-09-13 · No fix listed CWE-200
Priority LOW 25
The No Update Nag plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.4.12.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00482 · Published 2024-08-09 · No fix listed CWE-200
Priority LOW 24
The Add Admin CSS plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.0.1.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00439 · Published 2024-07-27 · No fix listed CWE-200
Open these records in search → All records by CVSS severity
1 0 11 0 0
THREATIST.IORead the docs