Read the docs

MantraBrain

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

MantraBrain records in CISA KEV

No MantraBrain vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Yatra 1 record LOW

Records

6 records

TI-2022-04562 CVE-2022-4974 · GHSA-p5fp-r7v7-h5q7

Freemius SDK <= 2.4.2 - Missing Authorization Checks

Priority LOW 28

The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_de…

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00442 Published 2024-10-16 Fixed in 2.0.2, 1.9.8 +273 CWE-862
TI-2024-11248 CVE-2024-12127 · GHSA-6wqm-wv7q-pgvj

Cross-site scripting in MantraBrain Learning Management System, eLearning, Course…

Priority LOW 27

The Learning Management System, eLearning, Course Builder, WordPress LMS Plugin – Sikshya LMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘page’ parameter in all versions up to, and inclu…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00362 Published 2024-12-17 No fix listed CWE-80
TI-2022-23513 CVE-2022-47436 · GHSA-jx73-f6rp-8fxv

WordPress Yatra Plugin <= 2.1.14 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MantraBrain Yatra allows Stored XSS.This issue affects Yatra: from n/a through 2.1.14.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-05-10 No fix listed CWE-79
TI-2025-35837 CVE-2025-57985 · GHSA-wq67-359w-gv3w

WordPress Ultimate Watermark Plugin <= 1.1 - Broken Access Control Vulnerability

Priority LOW 20

Missing Authorization vulnerability in MantraBrain Ultimate Watermark ultimate-watermark allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Watermark: from n/a through <=…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00252 Published 2025-09-22 No fix listed CWE-862
Open these records in search →