sumotto

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

sumotto records in CISA KEV

No sumotto vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2025-12696 CVE-2025-13894 · GHSA-4mvm-j443-cm58

CSV Sumotto <= 1.0 - Reflected Cross-Site Scripting

LOW 27

The CSV Sumotto plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `$_SERVER['PHP_SELF']` variable in all versions up to, and including, 1.0 due to insufficient input sanitization and output esc…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0022 Published 2025-12-06 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0