Read the docs

Milan Petrovic

Records18All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

Milan Petrovic records in CISA KEV

No Milan Petrovic vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Gd Bbpress Attachments 3 records LOW Coreactivity 2 records HIGH Gd Rating System 2 records LOW Gd Security Headers 2 records LOW Gd Star Rating 2 records LOW Gd Mail Queue 1 record LOW

Records

2 records in Coreactivity · all components

TI-2024-00786 CVE-2024-0852 · GHSA-gx24-fg4m-2f7m

coreActivity < 1.8.1 - Unauthenticated Stored XSS

Priority HIGH 73

The coreActivity: Activity Logging for WordPress plugin before 1.8.1 does not escape some request data when outputting it back in the admin dashboard, allowing unauthenticated users to perform Stored XSS attack against h…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00706 Published 2025-05-15 Fixed in 1.8.1 CWE-79
TI-2024-00801 CVE-2024-0868 · GHSA-w3jf-rqmq-p89q

coreActivity < 2.1 - Unauthenticated IP Spoofing

Priority MEDIUM 63

The coreActivity: Activity Logging plugin for WordPress plugin before 2.1 retrieved IP addresses of requests via headers such X-FORWARDED to log them, allowing users to spoof them by providing an arbitrary value

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00482 Published 2024-04-17 Fixed in 2.1
Open these records in search →