thehp

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

thehp records in CISA KEV

No thehp vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2025-33514 CVE-2025-53577 · GHSA-55hc-5m33-3ph3

WordPress Global DNS Plugin <= 3.1.0 - Remote Code Execution (RCE) Vulnerability

MEDIUM 49

Improper Control of Generation of Code ('Code Injection') vulnerability in thehp Global DNS global-dns allows Remote Code Inclusion.This issue affects Global DNS: from n/a through <= 3.1.0.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00388 Published 2025-08-20 No fix listed CWE-94

TI-2024-36307 CVE-2024-54218 · GHSA-chqw-mw32-x7wh

WordPress AIO Contact plugin <= 2.8.1 - Unauthenticated Plugin Settings Change vulnerability

LOW 35

Missing Authorization vulnerability in thehp AIO Contact aio-contact.This issue affects AIO Contact: from n/a through <= 2.8.1.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00317 Published 2024-12-09 No fix listed CWE-862

TI-2024-36308 CVE-2024-54219 · GHSA-wcrv-pqj9-gq8r

WordPress AIO Contact plugin <= 2.8.1 - Unauthenticated Site-Wide Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in thehp AIO Contact aio-contact.This issue affects AIO Contact: from n/a through <= 2.8.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00369 Published 2024-12-09 No fix listed CWE-79

Open these records in search →

Critical	1
High	1
Medium	1
Low	0
No CVSS	0