Read the docs

fs-code

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

fs-code records in CISA KEV

No fs-code vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Booknetic 1 record HIGH

Records

6 records

TI-2024-12193 CVE-2024-13146 · GHSA-xpv6-mc85-j28m

Booknetic < 4.1.5 - Staff Creation via CSRF

Priority HIGH 73

The Booknetic WordPress plugin before 4.1.5 does not have CSRF check when creating Staff accounts, which could allow attackers to make logged in admin add arbitrary Staff members via a CSRF attack

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0024 Published 2025-03-26 Fixed in 4.1.5 CWE-352
TI-2025-19849 CVE-2025-26978 · GHSA-87c8-vcwq-2gcc

WordPress FS Poster plugin <= 6.5.8 - SQL Injection vulnerability

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in fs-code FS Poster fs-poster.This issue affects FS Poster: from n/a through <= 6.5.8.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00338 Published 2025-03-15 No fix listed CWE-89
Open these records in search →