Incsub

Records27All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high10CVSS 7.0–8.9

Exploited now

Incsub records in CISA KEV

No Incsub vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Forminator 20 records MEDIUM Hummingbird 4 records HIGH Hustle 2 records MEDIUM Buddypress-activity-plus 1 record LOW

Records

1 record in Buddypress-activity-plus · all components

TI-2015-07832 CVE-2015-9455 · GHSA-2r85-wfhw-9qqf

The buddypress-activity-plus plugin before 1.6.2 for WordPress has CSRF with resultant…

LOW 36

The buddypress-activity-plus plugin before 1.6.2 for WordPress has CSRF with resultant directory traversal via the wp-admin/admin-ajax.php bpfb_photos[] parameter in a bpfb_remove_temp_images action.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00715 Published 2019-10-07 No fix listed CWE-352

Open these records in search →

Critical	2
High	10
Medium	14
Low	1
No CVSS	0