Read the docs

Narnoo

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Narnoo records in CISA KEV

No Narnoo vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-17447 CVE-2025-23680 · GHSA-93vr-r8wm-997h

WordPress Narnoo Operator plugin <= 2.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Narnoo Narnoo Operator narnoo-shortcodes allows Reflected XSS.This issue affects Narnoo Operator: from n/a through <=…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00393 Published 2025-03-26 No fix listed CWE-79
TI-2024-34622 CVE-2024-51708 · GHSA-w6jq-2jfh-gxc9

WordPress Narnoo Commerce Manager plugin <= 1.6.0 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Narnoo Narnoo Commerce Manager narnoo-commerce-manager allows Reflected XSS.This issue affects Narnoo Commerce Manager…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00287 Published 2024-11-09 No fix listed CWE-79
Open these records in search →