heart5

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

heart5 records in CISA KEV

No heart5 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Statpresscn 1 record LOW

Records

2 records

TI-2025-17311 CVE-2025-23544 · GHSA-f8jg-7qwp-x4x6

WordPress StatPressCN plugin <= 1.9.1 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in heart5 StatPressCN statpresscn allows Reflected XSS.This issue affects StatPressCN: from n/a through <= 1.9.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00266 Published 2025-01-23 No fix listed CWE-79

TI-2011-00558 CVE-2011-0641 · GHSA-rgj5-vhq5-p9jc

Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/admin.php in the…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/admin.php in the StatPressCN plugin 1.9.0 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) what1, (2) what2, (3) what…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0183 Published 2011-01-25 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0