dimafreund

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

dimafreund records in CISA KEV

No dimafreund vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2025-30522 CVE-2025-48152 · GHSA-2xrg-4jwx-p6xh

WordPress Rentsyst Plugin <= 2.0.100 - Cross Site Scripting (XSS) Vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dimafreund Rentsyst rentsyst allows Reflected XSS.This issue affects Rentsyst: from n/a through <= 2.0.100.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00228 Published 2025-08-20 No fix listed CWE-79

TI-2025-23566 CVE-2025-32501 · GHSA-856w-4h2q-c3vm

WordPress RentSyst plugin <= 2.0.92 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

LOW 31

Cross-Site Request Forgery (CSRF) vulnerability in dimafreund Rentsyst rentsyst allows Stored XSS.This issue affects Rentsyst: from n/a through <= 2.0.92.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00193 Published 2025-04-09 No fix listed CWE-352

TI-2026-58326 CVE-2026-84835 · GHSA-gq99-3c9g-g6g9

WordPress Rentsyst plugin <= 2.1.5 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in DimaFreund Rentsyst rentsyst allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Rentsyst: from n/a through 2.1.5.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00313 Published 2026-09-02 No fix listed CWE-862

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0