Vendors / Ramon Fincken Records 7 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Ramon Fincken records in CISA KEV No Ramon Fincken vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 38
Cross-Site Request Forgery (CSRF) vulnerability in Ramon Fincken Mass Delete Unused Tags plugin <= 2.0.0 versions.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00265 · Published 2023-05-18 · No fix listed CWE-352
Priority LOW 38
Cross-Site Request Forgery (CSRF) vulnerability in Ramon Fincken Auto Prune Posts plugin <= 1.8.0 versions.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00265 · Published 2023-05-18 · No fix listed CWE-352
Priority LOW 30
The simple-add-pages-or-posts plugin before 1.7 for WordPress has CSRF for deleting users.
CVSS 3.0 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00605 · Published 2019-08-14 · No fix listed CWE-352
Priority LOW 28
Cross-Site Request Forgery (CSRF) vulnerability in ramon fincken Auto Prune Posts auto-prune-posts allows Cross Site Request Forgery.This issue affects Auto Prune Posts: from n/a through <= 3.0.0.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00143 · Published 2025-11-13 · No fix listed CWE-352
Priority LOW 27
The Simple add pages or posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.0.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00201 · Published 2025-01-07 · No fix listed CWE-352
Priority LOW 26
The admin-renamer-extended (aka Admin renamer extended) plugin 3.2.1 for WordPress allows wp-admin/plugins.php?page=admin-renamer-extended/admin.php CSRF.
CVSS 3.1 MEDIUM 5.7· Network · Low privileges · User interaction · EPSS 0.00526 · Published 2019-08-08 · No fix listed CWE-352
Priority LOW 25
The Simple add pages or posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping.
CVSS 3.1 MEDIUM 5.5· Network · High privileges · No interaction · EPSS 0.00308 · Published 2025-02-08 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 2 5 0 0
THREATIST.IORead the docs