Vendors / sainwp Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 0
Exploited now sainwp records in CISA KEV No sainwp vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 45
The OneStore Sites plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 0.1.1 via the class-export.php file.
CVSS 3.1 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00371 · Published 2025-02-27 · No fix listed CWE-918
Priority MEDIUM 42
Cross-Site Request Forgery (CSRF) vulnerability in sainwp OneStore Sites onestore-sites allows Cross Site Request Forgery.This issue affects OneStore Sites: from n/a through <= 0.1.1.
CVSS 3.1 CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.00243 · Published 2025-02-07 · No fix listed CWE-352
Open these records in search → All records by CVSS severity
2 0 0 0 0
