Okapitech

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Okapitech records in CISA KEV

No Okapitech vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wp Sticky Button 1 record LOW

Records

1 record in Wp Sticky Button · all components

TI-2022-02191 CVE-2022-2375 · GHSA-fp9w-4hqx-5jxj

WP Sticky Button < 1.4.1 - Unauthenticated Arbitrary Settings Update to Stored XSS

LOW 24

The WP Sticky Button WordPress plugin before 1.4.1 does not have authorisation and CSRF checks when saving its settings, allowing unauthenticated users to update them.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00365 Published 2022-08-22 Fixed in 1.4.1 CWE-352

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0