Incsub

Records27All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high10CVSS 7.0–8.9

Exploited now

Incsub records in CISA KEV

No Incsub vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Forminator 20 records MEDIUM Hummingbird 4 records HIGH Hustle 2 records MEDIUM Buddypress-activity-plus 1 record LOW

Records

2 records in Hustle · all components

TI-2019-08901 CVE-2019-11872 · GHSA-vwqw-277x-qq2j

The Hustle (aka wordpress-popup) plugin 6.0.7 for WordPress is vulnerable to CSV…

MEDIUM 42

The Hustle (aka wordpress-popup) plugin 6.0.7 for WordPress is vulnerable to CSV Injection as it allows for injecting malicious code into a pop-up window.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02238 Published 2019-05-29 No fix listed CWE-1236

TI-2018-13138 CVE-2018-18576 · GHSA-rj53-wf3f-rxvv

The Hustle (aka wordpress-popup) plugin through 6.0.5 for WordPress allows Directory…

LOW 27

The Hustle (aka wordpress-popup) plugin through 6.0.5 for WordPress allows Directory Traversal to obtain a directory listing via the views/admin/dashboard/ URI.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01441 Published 2020-03-17 No fix listed CWE-22

Open these records in search →

Critical	2
High	10
Medium	14
Low	1
No CVSS	0