Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
onthemapmarketing records in CISA KEVNo onthemapmarketing vulnerabilities are listed in CISA KEV.
Priority LOW 38
The Accessibly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the REST API in all versions up to, and including, 3.0.3.
CVSS 3.1HIGH 7.2· Network · No auth · No interaction · EPSS 0.00411 · Published 2026-04-15 · No fix listed CWE-79
Open these records in search →