Vendors / shinephp Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now shinephp records in CISA KEV No shinephp vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 40
The User Role Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.64.3.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00329 · Published 2024-12-17 · No fix listed CWE-352
Priority LOW 24
Multiple cross-site scripting (XSS) vulnerabilities in the Thank You Counter Button plugin 1.8.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) thanks_caption, (2) thanks_caption_…
CVSS 2.0 MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.0205 · Published 2014-03-07 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
Critical0 High1 Medium1 Low0 No CVSS0