dvankooten

Records16All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

dvankooten records in CISA KEV

No dvankooten vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mailchimp 4 records LOW Mailchimp For Wordpress 3 records LOW Koko Analytics 2 records HIGH Mailchimp Top Bar 1 record LOW Social Sharing 1 record LOW

Records

2 records in Koko Analytics · all components

TI-2026-18342 CVE-2026-22850

SQL injection in dvankooten koko-analytics

HIGH 72

Koko Analytics is an open-source analytics plugin for WordPress.

CVSS 3.1HIGH 8.4 Network No auth User interaction EPSS 0.00491 Published 2026-01-19 Fixed in 2.1.3 CWE-89

TI-2024-08035 CVE-2024-8662 · GHSA-3292-h24j-xq6c

Koko Analytics <= 1.3.12 - Reflected Cross-Site Scripting

LOW 28

The Koko Analytics plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.3.12.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00471 Published 2024-09-24 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	15
Low	0
No CVSS	0