Vendors / Getigniteup Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Getigniteup records in CISA KEV No Getigniteup vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 39
includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows CSRF.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.0074 · Published 2019-11-12 · No fix listed CWE-352
Priority LOW 39
includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows unauthenticated arbitrary file deletion.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.03248 · Published 2019-11-12 · No fix listed CWE-306
Priority LOW 29
includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress is vulnerable to stored XSS.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00966 · Published 2019-11-12 · No fix listed CWE-79
Priority LOW 27
includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows information disclosure.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01397 · Published 2019-11-12 · No fix listed CWE-306
Priority LOW 25
The IgniteUp WordPress plugin through 3.4.1 does not sanitise and escape some fields when high privilege users don't have the unfiltered_html capability, which could lead to Stored Cross-Site Scripting issues
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00604 · Published 2022-05-09 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 2 3 0 0
THREATIST.IORead the docs