Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Funnnny records in CISA KEVNo Funnnny vulnerabilities are listed in CISA KEV.
Priority LOW 30
Cross-Site Request Forgery (CSRF) vulnerability in Funnnny HidePost hidepost allows Reflected XSS.This issue affects HidePost: from n/a through <= 2.3.8.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00123 · Published 2025-06-27 · No fix listed CWE-352
Priority LOW 19
The HidePost plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3.8.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00133 · Published 2025-09-27 · No fix listed CWE-352
