intermod

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

intermod records in CISA KEV

No intermod vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-02896 CVE-2026-3353 · GHSA-5j54-r8cm-hmwx

Comment SPAM Wiper <= 1.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'API Key' Setting

LOW 20

The Comment SPAM Wiper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'API Key' setting in all versions up to, and including, 1.2.1.

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.002 Published 2026-03-21 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0