Kanban for WordPress

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Kanban for WordPress records in CISA KEV

No Kanban for WordPress vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Kanban Boards For Wordpress 3 records MEDIUM Kanban Boards 1 record LOW

Records

3 records in Kanban Boards For Wordpress · all components

TI-2023-00828 CVE-2023-0873 · GHSA-8j78-9w7g-w7xq

Kanban Boards for WordPress < 2.5.21 - Admin+ Stored XSS

MEDIUM 55

The Kanban Boards for WordPress plugin before 2.5.21 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the un…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00548 Published 2023-06-27 Fixed in 2.5.21

TI-2023-21404 CVE-2023-40606 · GHSA-32mh-vqmr-g449

WordPress Kanban Boards for WordPress Plugin <= 2.5.21 is vulnerable to Arbitrary Code Execution

MEDIUM 43

Improper Control of Generation of Code ('Code Injection') vulnerability in Kanban for WordPress Kanban Boards for WordPress.This issue affects Kanban Boards for WordPress: from n/a through 2.5.21.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.0082 Published 2023-12-29 No fix listed CWE-94

TI-2023-09683 CVE-2023-23884 · GHSA-x8v3-q4x3-mq7p

WordPress Kanban Boards for WordPress Plugin <= 2.5.20 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kanban for WordPress Kanban Boards for WordPress plugin <= 2.5.20 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-05-09 No fix listed CWE-79

Open these records in search →

Critical	1
High	1
Medium	4
Low	0
No CVSS	0