hiddenpearls

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

hiddenpearls records in CISA KEV

No hiddenpearls vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2025-01848 CVE-2025-2111 · GHSA-xqfq-g578-jf37

WP Headers And Footers <= 3.1.1 - Cross-Site Request Forgery to Arbitrary Options Update

LOW 34

The Insert Headers And Footers plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.1.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00238 Published 2025-04-19 No fix listed CWE-352

TI-2025-01520 CVE-2025-1764 · GHSA-xj9h-82qf-qx5w

LoginPress <= 3.3.1 - Cross-Site Request Forgery to Arbitrary Options Update

LOW 34

The LoginPress | wp-login Custom Login Page Customizer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.3.1.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.0022 Published 2025-03-14 No fix listed CWE-352

TI-2022-04562 CVE-2022-4974 · GHSA-p5fp-r7v7-h5q7

Freemius SDK <= 2.4.2 - Missing Authorization Checks

LOW 28

The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_de…

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00442 Published 2024-10-16 Fixed in 2.0.2, 1.9.8 +273 CWE-862

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0