Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
idiatech records in CISA KEVNo idiatech vulnerabilities are listed in CISA KEV.
Priority LOW 38
The Catalog Importer, Scraper & Crawler plugin for WordPress is vulnerable to PHP code injection in all versions up to, and including, 5.1.4.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00696 · Published 2025-09-11 · No fix listed CWE-94
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in idiatech Catalog Importer, Scraper & Crawler intelligent-importer allows Reflected XSS.This issue affects Catalog Impo…
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00334 · Published 2025-02-03 · No fix listed CWE-79
