Read the docs

hovanesvn

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

hovanesvn records in CISA KEV

No hovanesvn vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2025-08756 CVE-2025-9561 · GHSA-cgpg-6265-g3wp

Unrestricted file upload in hovanesvn AP Background

Priority LOW 39

The AP Background plugin for WordPress is vulnerable to arbitrary file uploads due to missing authorization and insufficient file validation within the advParallaxBackAdminSaveSlider() handler in versions 3.8.1 to 3.8.2.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00645 Published 2025-10-03 No fix listed CWE-434
TI-2025-09331 CVE-2025-10165 · GHSA-pm6x-c6g2-737j

AP Background <= 3.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 28

The AP Background plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'adv_parallax_back' shortcode in all versions up to, and including, 3.8.2 due to insufficient input sanitization and ou…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00237 Published 2025-10-03 No fix listed CWE-79
TI-2025-09082 CVE-2025-9897 · GHSA-793p-f9q8-v6xw

AP Background <= 3.8.2 - Cross-Site Request Forgery

Priority LOW 19

The AP Background plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.2.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00133 Published 2025-10-03 No fix listed CWE-352
Open these records in search →