Vendors / rachelos Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 0
Exploited now rachelos records in CISA KEV No rachelos vulnerabilities are listed in CISA KEV.
Priority HIGH 81
WeRSS (we-mp-rss) through 1.5.3 contains a remote code execution vulnerability that allows unauthenticated attackers to run code via the template parameter of the public GET /rss/{feed_id} endpoint.
CVSS 4.0 CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.01003 · Published 2026-10-16 · No fix listed CWE-95
Priority MEDIUM 61
we-mp-rss through 1.5.3 contains a missing authorization vulnerability in the /api/v1/wx/tools/export/download endpoint that allows unauthenticated attackers to download export archives because its authentication depende…
CVSS 4.0 MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00644 · Published 2026-10-14 · No fix listed CWE-862
Priority MEDIUM 61
A vulnerability was detected in rachelos WeRSS we-mp-rss up to 1.4.8.
CVSS 4.0 MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00319 · Published 2026-02-09 · No fix listed CWE-1394
Priority MEDIUM 57
A flaw has been found in rachelos WeRSS we-mp-rss up to 1.4.8.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00347 · Published 2026-02-09 · No fix listed CWE-22
Priority MEDIUM 57
A weakness has been identified in rachelos WeRSS we-mp-rss up to 1.4.7.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00282 · Published 2025-11-14 · No fix listed CWE-918
Priority MEDIUM 56
A vulnerability has been found in rachelos WeRSS we-mp-rss up to 1.4.8.
CVSS 4.0 MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00286 · Published 2026-02-20 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
1 0 5 0 0
THREATIST.IORead the docs