Read the docs

Gti

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Gti records in CISA KEV

No Gti vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Throws Spam Away 1 record LOW

Records

1 record in Throws Spam Away · all components

TI-2022-01575 CVE-2022-1709 · GHSA-3xr4-h6r4-mqv2

Throws SPAM Away < 3.3.1 - Comment Deletion via CSRF

Priority LOW 20

The Throws SPAM Away WordPress plugin before 3.3.1 does not have CSRF checks in place when deleting comments (either all, spam, or pending), allowing attackers to make a logged in admin delete comments via a CSRF attack

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00435 Published 2022-06-06 Fixed in 3.3.1 CWE-352
Open these records in search →