Read the docs

inisev

Records27All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

inisev records in CISA KEV

No inisev vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Redirection 4 records MEDIUM Enhanced Text Widget 3 records MEDIUM Social Media Share Buttons & Social Sharing Icons 3 records MEDIUM Ultimate Posts Widget 3 records MEDIUM Rss Redirect & Feedburner Alternative 2 records LOW Ssl Mixed Content Fix 2 records LOW

Records

4 records in Redirection · all components

TI-2023-01258 CVE-2023-1331 · GHSA-j5w4-p5hq-hh3c

Redirection < 1.1.5 - Plugin Reset via CSRF

Priority MEDIUM 62

The Redirection WordPress plugin before 1.1.5 does not have CSRF checks in the uninstall action, which could allow attackers to make logged in admins delete all the redirections through a CSRF attack.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00326 Published 2023-04-17 Fixed in 1.1.5
TI-2023-01257 CVE-2023-1330 · GHSA-27cj-w94w-9m9v

Redirection < 1.1.4 - Redirect Creation via CSRF

Priority MEDIUM 62

The Redirection WordPress plugin before 1.1.4 does not add nonce verification in place when adding the redirect, which could allow attackers to add redirects via a CSRF attack.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00344 Published 2023-04-03 Fixed in 1.1.4 CWE-352
TI-2023-00909 CVE-2023-0958 · GHSA-hpq9-m2jp-4fgr

Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function

Priority LOW 30

Several plugins for WordPress by Inisev are vulnerable to unauthorized installation of plugins due to a missing capability check on the handle_installation function that is called via the inisev_installation AJAX aciton…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00691 Published 2023-07-28 No fix listed CWE-862
TI-2023-03692 CVE-2023-3977 · GHSA-6jhg-gg85-9xxf

Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function

Priority LOW 21

Several plugins for WordPress by Inisev are vulnerable to Cross-Site Request Forgery to unauthorized installation of plugins due to a missing nonce check on the handle_installation function that is called via the inisev_…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00611 Published 2023-07-28 No fix listed CWE-352
Open these records in search →