Read the docs

simonfairbairn

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

simonfairbairn records in CISA KEV

No simonfairbairn vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-14117 CVE-2025-15477 · GHSA-5m24-m65h-vc6r

The Bucketlister <= 0.1.5 - Authenticated (Contributor+) SQL Injection via `category` and `id` Shortcode Attributes

Priority LOW 28

The Bucketlister plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode `category` and `id` attributes in all versions up to, and including, 0.1.5 due to insufficient escaping on the user supplied…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00258 Published 2026-02-07 No fix listed CWE-89
TI-2025-14116 CVE-2025-15476 · GHSA-vc9m-xjw2-9f76

The Bucketlister <= 0.1.5 - Missing Authorization to Authenticated (Subscriber+) Bucket List Modification

Priority LOW 19

The The Bucketlister plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the bucketlister_do_admin_ajax() function in all versions up to, and including, 0.1.5.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00188 Published 2026-02-07 No fix listed CWE-862
Open these records in search →