Gopostmatic

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Gopostmatic records in CISA KEV

No Gopostmatic vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Replyable 2 records HIGH

Records

2 records

TI-2022-03905 CVE-2022-4265 · GHSA-2wpw-75c5-m9hx

Replyable < 2.2.10 - Subscriber+ PHP Object Injection

HIGH 73

The Replyable WordPress plugin before 2.2.10 does not validate the class name submitted by the request when instantiating an object in the prompt_dismiss_notice action and also lacks CSRF check in the related action.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00511 Published 2023-03-06 Fixed in 2.2.10 CWE-352

TI-2015-07788 CVE-2015-9411 · GHSA-rrwr-j7rw-43fm

The Postmatic plugin before 1.4.6 for WordPress has XSS.

LOW 29

The Postmatic plugin before 1.4.6 for WordPress has XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00985 Published 2019-09-25 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0