Read the docs

shabboscommerce

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

shabboscommerce records in CISA KEV

No shabboscommerce vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2025-17461 CVE-2025-23694 · GHSA-8xqq-m2p5-c889

WordPress Shabbos and Yom Tov plugin <= 1.9 - CSRF to Stored XSS vulnerability

Priority LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in shabboscommerce Shabbos and Yom Tov shabbos-and-yom-tov allows Stored XSS.This issue affects Shabbos and Yom Tov: from n/a through <= 1.9.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00182 Published 2025-01-16 No fix listed CWE-352
Open these records in search →