Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
MessageMetric records in CISA KEVNo MessageMetric vulnerabilities are listed in CISA KEV.
Priority LOW 30
Cross-Site Request Forgery (CSRF) vulnerability in MessageMetric Review Wave – Google Places Reviews review-wave-google-places-reviews allows Stored XSS.This issue affects Review Wave – Google Places Reviews: from n/a th…
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00152 · Published 2025-04-17 · No fix listed CWE-352
Priority LOW 19
The MMA Call Tracking plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3.15.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00183 · Published 2026-02-11 · No fix listed CWE-352
