Vendors / marcinlawrowski Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now marcinlawrowski records in CISA KEV No marcinlawrowski vulnerabilities are listed in CISA KEV.
Priority LOW 31
The Wise Chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the X-Forwarded-For header in all versions up to, and including, 3.3.4 due to insufficient input sanitization and output escaping.
CVSS 3.1 HIGH 7.2· Network · No auth · No interaction · EPSS 0.00287 · Published 2025-06-17 · No fix listed CWE-79
Priority LOW 30
The Wise Analytics plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.1.9.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00349 · Published 2026-01-24 · No fix listed CWE-862
Open these records in search → All records by CVSS severity
Critical0 High1 Medium1 Low0 No CVSS0