Vendors / rainafarai Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now rainafarai records in CISA KEV No rainafarai vulnerabilities are listed in CISA KEV.
Priority LOW 30
Unauthenticated Cross Site Scripting (XSS) in Notification for Telegram <= 3.5.2 versions.
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00175 · Published 2026-09-30 · No fix listed CWE-79
Priority LOW 30
Unauthenticated Cross Site Scripting (XSS) in Notification for Telegram <= 3.5 versions.
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00175 · Published 2026-06-15 · No fix listed CWE-79
Priority LOW 21
The Notification for Telegram plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.5.1.
CVSS 3.1 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00473 · Published 2026-07-11 · No fix listed CWE-862
Priority LOW 19
Missing Authorization vulnerability in rainafarai Notification for Telegram notification-for-telegram allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Notification for Telegram:…
CVSS 3.1 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.0022 · Published 2025-12-09 · No fix listed CWE-862
Priority LOW 19
Cross-Site Request Forgery (CSRF) vulnerability in rainafarai Notification for Telegram notification-for-telegram allows Cross Site Request Forgery.This issue affects Notification for Telegram: from n/a through <= 3.5.
CVSS 3.1 MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.0014 · Published 2025-09-05 · No fix listed CWE-352
Open these records in search → All records by CVSS severity
0 2 3 0 0
THREATIST.IORead the docs