thedrifted

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

thedrifted records in CISA KEV

No thedrifted vulnerabilities are listed in CISA KEV.

1 record

TI-2025-03300 CVE-2025-3746 · GHSA-grr2-2mc6-4c5p

MEDIUM 50

The OTP-less one tap Sign in plugin for WordPress is vulnerable to privilege escalation via account takeover in versions 2.0.14 to 2.0.59.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00557 Published 2025-05-02 No fix listed CWE-862