Dave Kiss

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Dave Kiss records in CISA KEV

No Dave Kiss vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Vimeography 2 records MEDIUM

Records

2 records

TI-2024-00762 CVE-2024-0825 · GHSA-vrx4-h7cg-6q4x

Vimeography: Vimeo Video Gallery WordPress Plugin <= 2.3.2 - Authenticated (Contributor+) PHP Object Injection

MEDIUM 42

The Vimeography: Vimeo Video Gallery WordPress Plugin plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.3.2 via deserialization of untrusted input via the vimeography_dupl…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00893 Published 2024-03-05 No fix listed CWE-502

TI-2024-23639 CVE-2024-35770 · GHSA-8rgp-h8v7-xr48

WordPress Vimeography plugin <= 2.4.1 - Cross Site Request Forgery (CSRF) vulnerability

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Dave Kiss Vimeography: Vimeo Video Gallery WordPress Plugin.This issue affects Vimeography: Vimeo Video Gallery WordPress Plugin: from n/a through 2.4.1.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00254 Published 2024-06-21 No fix listed CWE-352

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0