nestornoe

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

nestornoe records in CISA KEV

No nestornoe vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-13452 CVE-2025-14734 · GHSA-6rh8-97r4-x53p

Amazon affiliate lite Plugin <= 1.0.0 - Cross-Site Request Forgery to Plugin Settings Update

LOW 23

The Amazon affiliate lite Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00121 Published 2025-12-20 No fix listed CWE-352

TI-2025-13453 CVE-2025-14735 · GHSA-gmgj-54ww-gq69

Amazon affiliate lite Plugin <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting

LOW 20

The "Amazon affiliate lite Plugin" plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escapi…

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00233 Published 2025-12-20 No fix listed CWE-80

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0