javibola

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

javibola records in CISA KEV

No javibola vulnerabilities are listed in CISA KEV.

1 record

TI-2026-07404 CVE-2026-8423 · GHSA-2cxv-v4mv-9w27

LOW 19

The JaviBola Custom Theme Test plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.5.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00179 Published 2026-05-20 No fix listed CWE-352