framework-y

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

framework-y records in CISA KEV

No framework-y vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2019-15788 CVE-2019-25738 · GHSA-p9g9-jpx8-w224

WordPress Hybrid Composer 1.4.6 Unauthenticated Settings Change

HIGH 81

WordPress Hybrid Composer 1.4.6 contains an unauthenticated settings change vulnerability that allows unauthenticated attackers to modify WordPress options by exploiting the hc_ajax_save_option action.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00347 Published 2026-06-04 No fix listed CWE-306

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0