Jonathan Lau

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Jonathan Lau records in CISA KEV

No Jonathan Lau vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-17341 CVE-2025-23574 · GHSA-ghjg-mfjj-w82r

WordPress CubePM plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jonathan Lau CubePM cubepm allows Reflected XSS.This issue affects CubePM: from n/a through <= 1.0.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00293 Published 2025-01-27 No fix listed CWE-79

TI-2025-20895 CVE-2025-28952 · GHSA-f4cp-8pj4-jjjf

WordPress CubePoints plugin <= 3.2.1 - Cross Site Request Forgery (CSRF) Vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Jonathan Lau CubePoints cubepoints allows Cross Site Request Forgery.This issue affects CubePoints: from n/a through <= 3.2.1.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00165 Published 2025-06-06 No fix listed CWE-352

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0