Vendors / marcoingraiti Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now marcoingraiti records in CISA KEV No marcoingraiti vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 39
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in marcoingraiti Actionwear products sync actionwear-products-sync allows SQL Injection.This issue affects Actionwear pro…
CVSS 3.1 HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00471 · Published 2025-04-01 · No fix listed CWE-89
Priority LOW 31
The Actionwear products sync plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.3.2.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00529 · Published 2025-02-18 · No fix listed CWE-209
Priority LOW 20
Missing Authorization vulnerability in marcoingraiti Actionwear products sync actionwear-products-sync allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Actionwear products sync:…
CVSS 3.1 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00375 · Published 2025-12-09 · No fix listed CWE-862
Open these records in search → All records by CVSS severity
Critical0 High1 Medium2 Low0 No CVSS0