Vendors / kentothemes Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 1
Exploited now kentothemes records in CISA KEV No kentothemes vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 50
The Kento Post View Counter plugin for WordPress is vulnerable to SQL Injection via the 'kento_pvc_geo' parameter in versions up to, and including, 2.8 due to insufficient escaping on the user supplied parameter and lack…
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00545 · Published 2024-10-16 · No fix listed CWE-89
Priority LOW 39
The kento-post-view-counter plugin through 2.8 for WordPress has wp-admin/admin.php?page=kentopvc_settings CSRF.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00732 · Published 2019-09-17 · No fix listed CWE-352
Priority LOW 29
The kento-post-view-counter plugin through 2.8 for WordPress has stored XSS via kento_pvc_numbers_lang, kento_pvc_today_text, or kento_pvc_total_text.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00956 · Published 2019-09-17 · No fix listed CWE-79
Priority LOW 29
The kento-post-view-counter plugin through 2.8 for WordPress has XSS via kento_pvc_geo.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00956 · Published 2019-09-17 · No fix listed CWE-79
Priority LOW 19
The Latest Tabs plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.
CVSS 3.1 MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00124 · Published 2026-01-07 · No fix listed CWE-352
Open these records in search → All records by CVSS severity
1 1 3 0 0
THREATIST.IORead the docs