Vendors / shen2 Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now shen2 records in CISA KEV No shen2 vulnerabilities are listed in CISA KEV.
Priority MEDIUM 41
The 多说社会化评论框 plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00587 · Published 2026-07-08 · No fix listed CWE-269
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in shen2 多说社会化评论框 duoshuo allows Reflected XSS.This issue affects 多说社会化评论框: from n/a through <= 1.2.
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00249 · Published 2025-08-14 · No fix listed CWE-79
Priority LOW 19
Cross-Site Request Forgery (CSRF) vulnerability in shen2 多说社会化评论框 duoshuo allows Cross Site Request Forgery.This issue affects 多说社会化评论框: from n/a through <= 1.2.
CVSS 3.1 MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.0014 · Published 2025-08-28 · No fix listed CWE-352
Open these records in search → All records by CVSS severity
0 2 1 0 0
THREATIST.IORead the docs