Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
m615926 records in CISA KEVNo m615926 vulnerabilities are listed in CISA KEV.
Priority MEDIUM 50
The Form Notify plugin for WordPress is vulnerable to Authentication Bypass in versions up to and including 1.1.10.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0073 · Published 2026-05-15 · No fix listed CWE-287
Open these records in search →