Read the docs

Stetic

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Stetic records in CISA KEV

No Stetic vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Stetic 1 record MEDIUM

Records

1 record

TI-2021-18780 CVE-2021-42364 · GHSA-7r7f-rxmv-c4j3

Stetic <= 1.0.6 Cross-Site Request Forgery to Stored Cross-Site Scripting

Priority MEDIUM 41

The Stetic WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation via the stats_page function found in the ~/stetic.php file, which made it possible for attackers to inject arbitrary…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00625 Published 2021-11-29 No fix listed CWE-352
Open these records in search →