ravster

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

ravster records in CISA KEV

No ravster vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Inquiry Cart 1 record MEDIUM

Records

2 records

TI-2024-04786 CVE-2024-5155 · GHSA-6w47-r8r6-rg62

Inquiry Cart <= 3.4.2 - Stored XSS via CSRF

MEDIUM 60

The Inquiry cart WordPress plugin through 3.4.2 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00212 Published 2024-06-14 No fix listed CWE-352

TI-2026-03545 CVE-2026-4090 · GHSA-22p7-jgf7-772h

Inquiry cart <= 3.4.2 - Cross-Site Request Forgery via Settings Form

LOW 27

The Inquiry Cart plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.4.2.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00243 Published 2026-04-22 No fix listed CWE-352

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0