Read the docs

Nitesh

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Nitesh records in CISA KEV

No Nitesh vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2025-40650 CVE-2025-66125 · GHSA-mw5j-qg7p-945p

WordPress Ultimate Auction plugin <= 4.3.3 - Sensitive Data Exposure vulnerability

Priority LOW 30

Insertion of Sensitive Information Into Sent Data vulnerability in Nitesh Ultimate Auction ultimate-auction allows Retrieve Embedded Sensitive Data.This issue affects Ultimate Auction : from n/a through <= 4.3.3.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00285 Published 2025-12-16 No fix listed CWE-201
TI-2025-17514 CVE-2025-23747 · GHSA-56cq-6fx2-6w65

WordPress Awesome Timeline plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nitesh Awesome Timeline awesome-timeline allows Stored XSS.This issue affects Awesome Timeline: from n/a through <= 1.…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0028 Published 2025-02-03 No fix listed CWE-79
TI-2025-41693 CVE-2025-68084 · GHSA-5gpr-xg7c-9pmr

WordPress Ultimate Auction plugin <= 4.3.3 - Broken Access Control vulnerability

Priority LOW 24

Missing Authorization vulnerability in Nitesh Ultimate Auction ultimate-auction allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Auction : from n/a through <= 4.3.3.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00202 Published 2025-12-16 No fix listed CWE-862
Open these records in search →