nexist

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

nexist records in CISA KEV

No nexist vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2025-09446 CVE-2025-10293 · GHSA-jr4v-gcqw-x774

Improper authentication in nexist Keyy Two Factor Authentication

LOW 38

The Keyy Two Factor Authentication (like Clef) plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.2.3.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00362 Published 2025-10-15 No fix listed CWE-287

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0