georgestephanis

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

georgestephanis records in CISA KEV

No georgestephanis vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2025-12172 CVE-2025-13308 · GHSA-fwgp-xx7q-2jwf

Application Passwords <= 0.1.3 - Reflected Cross-Site Scripting via reject_url

LOW 24

The Application Passwords plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'reject_url' parameter in all versions up to, and including, 0.1.3.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00243 Published 2025-12-06 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0