pkthree

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

pkthree records in CISA KEV

No pkthree vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-01339 CVE-2026-1654 · GHSA-rm46-f8vq-9224

Peter's Date Countdown <= 2.0.0 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']

LOW 27

The Peter's Date Countdown plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `$_SERVER['PHP_SELF']` parameter in all versions up to, and including, 2.0.0 due to insufficient input sanitization…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00333 Published 2026-02-05 No fix listed CWE-79

TI-2024-11648 CVE-2024-12554 · GHSA-8w6m-pgw2-jrgq

Peter’s Custom Anti-Spam <= 3.2.3 - Cross-Site Request Forgery via cas_register_post Function

LOW 24

The Peter’s Custom Anti-Spam plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.3.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00217 Published 2024-12-18 No fix listed CWE-352

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0