Rotating Posts Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Rotating Posts Project records in CISA KEV

No Rotating Posts Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Rotating Posts 1 record LOW

Records

1 record in Rotating Posts · all components

TI-2022-01711 CVE-2022-1847 · GHSA-jjhf-wgc4-xj86

Rotating Posts <= 1.11 - Arbitrary Settings Update to Stored XSS via CSRF

LOW 20

The Rotating Posts WordPress plugin through 1.11 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00429 Published 2022-06-27 No fix listed CWE-352

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0