Read the docs

siteheart

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

siteheart records in CISA KEV

No siteheart vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-05140 CVE-2025-5701 · GHSA-v36x-3fmp-47fp

HyperComments <= 1.2.2 - Unauthenticated (Subscriber+) Arbitrary Options Update

Priority MEDIUM 50

The HyperComments plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the hc_request_handler function in all versions up to,…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02234 Published 2025-06-05 No fix listed CWE-862
TI-2025-17276 CVE-2025-23509 · GHSA-83f2-g28h-f9cf

WordPress HyperComments plugin <= 0.9.6 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in siteheart HyperComments comments-with-hypercommentscom allows Reflected XSS.This issue affects HyperComments: from n/a…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00409 Published 2025-01-22 No fix listed CWE-79
Open these records in search →