Read the docs

ov3rkll

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

ov3rkll records in CISA KEV

No ov3rkll vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-12228 CVE-2025-13376 · GHSA-vr3c-fghg-pg6p

ProjectList <= 0.3.0 - Authenticated (Editor+) Arbitrary File Upload

Priority LOW 35

The ProjectList plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 0.3.0.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00657 Published 2025-11-25 No fix listed CWE-434
TI-2025-12222 CVE-2025-13370 · GHSA-29hj-wgxj-rcf8

ProjectList <= 0.3.0 - Authenticated (Editor+) SQL Injection via 'id' Parameter

Priority LOW 22

The ProjectList plugin for WordPress is vulnerable to time-based SQL Injection via the 'id' parameter in all versions up to, and including, 0.3.0 due to insufficient escaping on the user supplied parameter and lack of su…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0033 Published 2025-11-25 No fix listed CWE-89
Open these records in search →