Read the docs

istmoplugins

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

istmoplugins records in CISA KEV

No istmoplugins vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Get Bookings Wp 1 record MEDIUM

Records

4 records

TI-2024-29607 CVE-2024-44018 · GHSA-vhv5-xm77-fph6

WordPress Instant Chat WP plugin <= 1.0.5 - Local File Inclusion vulnerability

Priority HIGH 68

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in istmoplugins Instant Chat Floating Button for WordPress Websites instant-chat-wp allows PHP Local File Inclusion.This issue…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00557 Published 2024-10-05 No fix listed CWE-22
TI-2024-29604 CVE-2024-44015 · GHSA-jmp6-fm9v-883q

WordPress Users Control plugin <= 1.0.16 - Local File Inclusion vulnerability

Priority LOW 36

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in istmoplugins Users Control users-control allows PHP Local File Inclusion.This issue affects Users Control: from n/a through…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00557 Published 2024-10-05 No fix listed CWE-22
TI-2025-23033 CVE-2025-31896 · GHSA-3rgg-5jjq-pv68

WordPress GetBookingsWP Plugin <= 1.1.27 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in istmoplugins GetBookingsWP get-bookings-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GetBookingsWP: from n/a through <= 1.1.27.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00348 Published 2025-04-03 No fix listed CWE-862
Open these records in search →