Vendors / Progress Planner Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Progress Planner records in CISA KEV No Progress Planner vulnerabilities are listed in CISA KEV.
Priority MEDIUM 41
Incorrect Privilege Assignment vulnerability in Progress Planner Progress Planner progress-planner allows Privilege Escalation.This issue affects Progress Planner: from n/a through <= 1.8.0.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00481 · Published 2025-10-22 · No fix listed CWE-266
Priority MEDIUM 40
Subscriber Broken Access Control in Progress Planner <= 1.10.0 versions.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00315 · Published 2026-10-06 · No fix listed CWE-862
Priority LOW 30
Missing Authorization vulnerability in Progress Planner Progress Planner progress-planner.This issue affects Progress Planner: from n/a through <= 0.9.1.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00396 · Published 2024-11-01 · No fix listed CWE-862
Priority LOW 22
The AAA Autoload Optimizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'option_page' parameter in all versions up to, and including, 1.7.0 due to insufficient input sanitization and output e…
CVSS 3.1 MEDIUM 4.9· Network · Low privileges · No interaction · EPSS 0.00228 · Published 2026-11-06 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 2 2 0 0
THREATIST.IORead the docs