Read the docs

Hijiriworld

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Hijiriworld records in CISA KEV

No Hijiriworld vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Advanced Schedule Posts 1 record MEDIUM Intuitive Custom Post Order 1 record LOW

Records

2 records

TI-2024-00224 CVE-2024-0249 · GHSA-76h7-whc6-vxcf

Advanced Schedule Posts <= 2.1.8 - Reflected XSS

Priority MEDIUM 64

The Advanced Schedule Posts WordPress plugin through 2.1.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high priv…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00324 Published 2025-05-15 No fix listed CWE-79
TI-2023-00961 CVE-2023-1016 · GHSA-qj2q-q979-fccj

Intuitive Custom Post Order <= 3.1.4.1 - Authenticated (Admin+) SQL Injection

Priority LOW 36

The Intuitive Custom Post Order plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 3.1.4.1, due to insufficient escaping on the user supplied 'objects' and 'tags' parameters and lack of…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00971 Published 2023-06-09 No fix listed CWE-89
Open these records in search →