docxpresso

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

docxpresso records in CISA KEV

No docxpresso vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2024-35148 CVE-2024-52477 · GHSA-46p5-2v62-6rxc

WordPress Document & Data Automation plugin <= 1.6.1 - CSRF to Stored XSS vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in docxpresso Document & Data Automation document-data-automation allows Stored XSS.This issue affects Document & Data Automation: from n/a through <= 1.6.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00173 Published 2024-12-02 No fix listed CWE-352

TI-2025-22717 CVE-2025-31554 · GHSA-qq9g-4q79-9r9h

WordPress Docxpresso plugin <= 2.6 - Arbitrary File Download vulnerability

LOW 27

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in docxpresso Docxpresso docxpresso allows Absolute Path Traversal.This issue affects Docxpresso: from n/a through <= 2.6.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00485 Published 2025-04-03 No fix listed CWE-22

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0