Vendors / Sola Plugins Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Sola Plugins records in CISA KEV No Sola Plugins vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 39
The Nifty Newsletters WordPress plugin is vulnerable to Cross-Site Request Forgery via the sola_nl_wp_head function found in the ~/sola-newsletters.php file which allows attackers to inject arbitrary web scripts, in vers…
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.007 · Published 2021-08-05 · No fix listed CWE-352
Priority LOW 37
A cross-site request forgery vulnerability exists in Sola Testimonials versions prior to 3.0.0.
CVSS 3.1 HIGH 8.1· Network · No auth · User interaction · EPSS 0.00252 · Published 2024-07-04 · Fixed in 3.0.0 CWE-352
Priority LOW 29
Missing Authorization vulnerability in SolaPlugins Sola Support Ticket allows Exploiting Incorrectly Configured Access Control Security Levels.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00339 · Published 2025-06-06 · No fix listed CWE-862
Priority LOW 28
The Super Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘alignment’ parameter in all versions up to, and including, 3.0.0 due to insufficient input sanitization and output escapin…
CVSS 3.1 MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00349 · Published 2024-09-26 · No fix listed CWE-79
Priority LOW 26
The sola-support-tickets plugin before 3.13 for WordPress has incorrect access control for /wp-admin with resultant XSS.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00783 · Published 2019-09-20 · No fix listed CWE-79
Priority LOW 24
A cross-site request forgery vulnerability exists in WP Tweet Walls versions prior to 1.0.4.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00256 · Published 2024-07-04 · Fixed in 1.0.4 CWE-352
Open these records in search → All records by CVSS severity
0 2 4 0 0
THREATIST.IORead the docs