Vendors / Joomlaserviceprovider Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Joomlaserviceprovider records in CISA KEV No Joomlaserviceprovider vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 73
The JSP Store Locator WordPress plugin through 1.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing user with Contributor to perform SQL injection attacks.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00586 · Published 2025-05-15 · No fix listed CWE-89
Priority MEDIUM 62
The JSP Store Locator WordPress plugin through 1.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00226 · Published 2025-05-15 · No fix listed CWE-352
Priority MEDIUM 49
The wsecure plugin before 2.4 for WordPress has remote code execution via shell metacharacters in the wsecure-config.php publish parameter.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.08738 · Published 2019-09-16 · No fix listed CWE-20
Priority LOW 27
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ajay Lulia wSecure Lite plugin <= 2.5 versions.
CVSS 3.1 MEDIUM 5.9· Network · High privileges · User interaction · EPSS 0.00369 · Published 2023-09-04 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 2 2 0 0
THREATIST.IORead the docs