kingyes

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

kingyes records in CISA KEV

No kingyes vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2024-10113 CVE-2024-10909 · GHSA-54cc-8pj6-f4vw

Pojo Forms <= 1.4.7 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via form_preview_shortcode

LOW 28

The The Pojo Forms plugin for WordPress is vulnerable to arbitrary shortcode execution via form_preview_shortcode AJAX action in all versions up to, and including, 1.4.7.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00457 Published 2024-12-06 No fix listed CWE-94

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0