Read the docs

Niceit

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Niceit records in CISA KEV

No Niceit vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Advance Post Prefix 2 records HIGH

Records

2 records in Advance Post Prefix · all components

TI-2024-11807 CVE-2024-12735 · GHSA-28c7-hwc8-phgm

Advance Post Prefix <= 1.1.1 - Admin+ SQL Injection

Priority HIGH 67

The Advance Post Prefix WordPress plugin through 1.1.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins and above to perform SQL injection attacks

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00586 Published 2025-05-15 No fix listed CWE-89
TI-2024-11806 CVE-2024-12734 · GHSA-8jcq-cgc3-57jm

Advance Post Prefix <= 1.1.1 - Reflected XSS

Priority MEDIUM 60

The Advance Post Prefix WordPress plugin through 1.1.1, Advance Post Prefix WordPress plugin through 1.1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00579 Published 2025-05-15 No fix listed CWE-79
Open these records in search →