OwnerRez

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

OwnerRez records in CISA KEV

No OwnerRez vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-56394 CVE-2026-81758 · GHSA-8wp8-m3g7-mx7c

WordPress OwnerRez API plugin <= 1.2.6 - Broken Access Control vulnerability

LOW 28

Subscriber Broken Access Control in OwnerRez API <= 1.2.6 versions.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.0026 Published 2026-08-31 No fix listed CWE-862

TI-2025-20900 CVE-2025-28957 · GHSA-2224-c6xm-m4xv

WordPress OwnerRez API plugin <= 1.2.1 - Cross Site Scripting (XSS) Vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OwnerRez OwnerRez API ownerrez allows Stored XSS.This issue affects OwnerRez API: from n/a through <= 1.2.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00192 Published 2025-07-04 No fix listed CWE-79

TI-2025-22951 CVE-2025-31814 · GHSA-6x6q-4c96-mpg8

WordPress OwnerRez Plugin <= 1.2.0 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in OwnerRez OwnerRez API ownerrez allows Cross Site Request Forgery.This issue affects OwnerRez API: from n/a through <= 1.2.0.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00213 Published 2025-04-01 No fix listed CWE-352

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0