Vendors / looswebstudio Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now looswebstudio records in CISA KEV No looswebstudio vulnerabilities are listed in CISA KEV.
Priority LOW 37
Cross-Site Request Forgery (CSRF) vulnerability in looswebstudio Arkhe arkhe allows PHP Local File Inclusion.This issue affects Arkhe: from n/a through <= 3.12.0.
CVSS 3.1 HIGH 8.1· Network · No auth · No interaction · EPSS 0.00315 · Published 2025-04-15 · No fix listed CWE-352
Priority LOW 31
The SEO SIMPLE PACK plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.2.1 via META description.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00537 · Published 2024-06-28 · No fix listed CWE-200
Priority LOW 20
The Highlighting Code Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.2.0 due to insufficient input sanitization and output escaping.
CVSS 3.1 MEDIUM 4.4· Network · High privileges · No interaction · EPSS 0.00335 · Published 2026-07-10 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 1 2 0 0
THREATIST.IORead the docs