mg12

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

mg12 records in CISA KEV

No mg12 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wp-recentcomments 2 records LOW

Records

5 records

TI-2012-00975 CVE-2012-1067 · GHSA-f2vh-2fr3-3pmx

SQL injection vulnerability in the WP-RecentComments plugin 2.0.7 for WordPress allows…

LOW 37

SQL injection vulnerability in the WP-RecentComments plugin 2.0.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter in an rc-content action to index.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01972 Published 2012-02-14 No fix listed CWE-89

TI-2025-31393 CVE-2025-49345 · GHSA-x3v7-84r2-j89m

WordPress WP-EasyArchives plugin <= 3.1.2 - Cross Site Request Forgery (CSRF) vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in mg12 WP-EasyArchives wp-easyarchives allows Stored XSS.This issue affects WP-EasyArchives: from n/a through <= 3.1.2.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00115 Published 2025-12-31 No fix listed CWE-352

TI-2023-09685 CVE-2023-23886 · GHSA-4pmr-4q2r-c836

WordPress WP-RecentComments plugin <= 2.2.7 - Broken Access Control vulnerability

LOW 25

Missing Authorization vulnerability in mg12 WP-RecentComments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-RecentComments: from n/a through 2.2.7.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00587 Published 2024-12-09 No fix listed CWE-862

TI-2012-00976 CVE-2012-1068 · GHSA-p79r-m85f-v88m

Cross-site scripting (XSS) vulnerability in the rc_ajax function in core.php in the…

LOW 24

Cross-site scripting (XSS) vulnerability in the rc_ajax function in core.php in the WP-RecentComments plugin before 2.0.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page paramete…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02062 Published 2012-02-14 No fix listed CWE-79

TI-2025-20824 CVE-2025-28881 · GHSA-c72g-6v9g-4gq7

WordPress Mobile Themes plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in mg12 Mobile Themes wp-mobile-themes allows Cross Site Request Forgery.This issue affects Mobile Themes: from n/a through <= 1.1.1.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00171 Published 2025-03-11 No fix listed CWE-352

Open these records in search →

Critical	0
High	2
Medium	3
Low	0
No CVSS	0