Vendors / Daniel Powney Records 7 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 3
Exploited now Daniel Powney records in CISA KEV No Daniel Powney vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 60
The Badgearoo WordPress plugin through 1.0.14 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users s…
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0034 · Published 2025-05-15 · No fix listed CWE-79
Priority MEDIUM 55
The Badgearoo WordPress plugin through 1.0.14 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltere…
CVSS 3.1 MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00287 · Published 2025-05-15 · No fix listed CWE-79
Priority MEDIUM 40
Cross-Site Request Forgery (CSRF) vulnerability in Daniel Powney Multi Rating plugin <= 5.0.6 versions.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00312 · Published 2023-11-09 · No fix listed CWE-352
Priority LOW 38
Cross-Site Request Forgery (CSRF) vulnerability in Daniel Powney Multi Rating plugin <= 5.0.5 versions.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00326 · Published 2023-03-14 · No fix listed CWE-352
Priority LOW 31
Unauth. Reflected Cross-Site Scripting vulnerability in Daniel Powney Multi Rating plugin <= 5.0.5 versions.
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00382 · Published 2023-03-29 · No fix listed CWE-79
Priority LOW 27
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Daniel Powney Multi Rating plugin <= 5.0.6 versions.
CVSS 3.1 MEDIUM 5.9· Network · High privileges · User interaction · EPSS 0.00369 · Published 2023-08-18 · No fix listed CWE-79
Priority LOW 24
Missing Authorization vulnerability in Daniel Powney Multi Rating allows Functionality Misuse.This issue affects Multi Rating: from n/a through 5.0.6.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00424 · Published 2024-04-24 · No fix listed CWE-862
Open these records in search → All records by CVSS severity
0 3 4 0 0
THREATIST.IORead the docs