otacke

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

otacke records in CISA KEV

No otacke vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-11822 CVE-2025-12904 · GHSA-f87p-wjm9-4rp5

SNORDIAN's H5PxAPIkatchu <= 0.4.17 - Unauthenticated Stored Cross-Site Scripting via insert_data

LOW 37

The SNORDIAN's H5PxAPIkatchu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'insert_data' AJAX endpoint in all versions up to, and including, 0.4.17 due to insufficient input sanitization and o…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00305 Published 2025-11-14 No fix listed CWE-79

TI-2025-22091 CVE-2025-30821 · GHSA-qrww-fvjf-83pv

WordPress SNORDIAN's H5PxAPIkatchu plugin <= 0.4.14 - Broken Access Control vulnerability

LOW 31

Missing Authorization vulnerability in otacke SNORDIAN's H5PxAPIkatchu h5pxapikatchu allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects SNORDIAN's H5PxAPIkatchu: from n/a through <= 0.4.14…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0059 Published 2025-03-27 No fix listed CWE-862

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0