Read the docs

iONE360

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

iONE360 records in CISA KEV

No iONE360 vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-14083 CVE-2025-15440 · GHSA-27g4-m3jv-cgvm

iONE360 configurator <= 2.0.57 - Unauthenticated Stored Cross-Site Scripting via Contact Form Parameters

Priority LOW 38

The iONE360 configurator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Contact Form Parameters in all versions up to, and including, 2.0.57 due to insufficient input sanitization and output es…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00418 Published 2026-02-11 No fix listed CWE-79
TI-2025-23594 CVE-2025-32529 · GHSA-hwpp-cpx2-m8fm

WordPress iONE360 configurator plugin <= 2.0.57 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in iONE360 iONE360 configurator ione360-configurator allows Reflected XSS.This issue affects iONE360 configurator: from n…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00293 Published 2025-04-17 No fix listed CWE-79
Open these records in search →