Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
dmitry78 records in CISA KEVNo dmitry78 vulnerabilities are listed in CISA KEV.
Priority LOW 26
The XiSearch bar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.6.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00129 · Published 2025-06-14 · No fix listed CWE-352
Open these records in search →