qrolic

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

qrolic records in CISA KEV

No qrolic vulnerabilities are listed in CISA KEV.

1 record

TI-2026-01333 CVE-2026-1648 · GHSA-4vr9-8jj4-gfwv

LOW 38

The Performance Monitor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.0.6.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00397 Published 2026-03-21 No fix listed CWE-918