Vendors / INVELITY Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 3
Exploited now INVELITY records in CISA KEV No INVELITY vulnerabilities are listed in CISA KEV.
Priority LOW 37
Cross-Site Request Forgery (CSRF) vulnerability in INVELITY Invelity MyGLS connect invelity-mygls-connect allows Object Injection.This issue affects Invelity MyGLS connect: from n/a through <= 1.1.1.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.0017 · Published 2025-09-05 · No fix listed CWE-352
Priority LOW 34
The Invelity Product Feeds plugin for WordPress is vulnerable to arbitrary file deletion via path traversal in all versions up to, and including, 1.2.6.
CVSS 3.1 HIGH 8.1· Network · High privileges · User interaction · EPSS 0.0018 · Published 2026-03-21 · No fix listed CWE-352
Priority LOW 30
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in INVELITY Invelity SPS connect invelity-sps-connect allows Reflected XSS.This issue affects Invelity SPS connect: from…
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00178 · Published 2025-12-29 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 3 0 0 0
