kagla

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

kagla records in CISA KEV

No kagla vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2025-22255 CVE-2025-30985 · GHSA-7v3q-fc37-v2cj

WordPress GNUCommerce plugin <= 1.5.4 - PHP Object Injection vulnerability

MEDIUM 49

Deserialization of Untrusted Data vulnerability in kagla GNUCommerce gnucommerce allows Object Injection.This issue affects GNUCommerce: from n/a through <= 1.5.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2025-04-15 No fix listed CWE-502

TI-2025-19503 CVE-2025-26565 · GHSA-w2ph-8pcw-pr59

WordPress GNUPress Plugin <= 0.2.9 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kagla GNUPress gnupress allows Reflected XSS.This issue affects GNUPress: from n/a through <= 0.2.9.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00381 Published 2025-03-26 No fix listed CWE-79

TI-2025-19502 CVE-2025-26564 · GHSA-rr6x-4q8f-283c

WordPress GNUCommerce Plugin <= 1.5.4 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kagla GNUCommerce gnucommerce allows Reflected XSS.This issue affects GNUCommerce: from n/a through <= 1.5.4.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00381 Published 2025-03-26 No fix listed CWE-79

Open these records in search →

Critical	1
High	2
Medium	0
Low	0
No CVSS	0