metalpriceapi

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

metalpriceapi records in CISA KEV

No metalpriceapi vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2025-30510 CVE-2025-48140 · GHSA-qxmm-84j4-p2gc

WordPress MetalpriceAPI plugin <= 1.1.4 - Remote Code Execution (RCE) Vulnerability

MEDIUM 43

Improper Control of Generation of Code ('Code Injection') vulnerability in metalpriceapi MetalpriceAPI metalpriceapi allows Code Injection.This issue affects MetalpriceAPI: from n/a through <= 1.1.4.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00443 Published 2025-06-09 No fix listed CWE-94

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0