Read the docs

robin-w

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

robin-w records in CISA KEV

No robin-w vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-65220 CVE-2026-101925 · GHSA-3qmp-qqq9-w2h8

bbp style pack <= 6.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Author Display Name

Priority LOW 28

The bbp style pack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name (via /wp-admin/profile.php) + bbp_reply_content (via bbPress reply form)' parameter in all versions up to, and in…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00195 Published 2026-10-01 No fix listed CWE-79
TI-2025-37529 CVE-2025-60163 · GHSA-9j7v-wc4q-vwx3

WordPress bbp topic count plugin <= 3.2 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Robin W bbp topic count bbp-topic-count allows DOM-Based XSS.This issue affects bbp topic count: from n/a through <= 3…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00223 Published 2025-09-26 No fix listed CWE-79
Open these records in search →