Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
thewebsitesupply records in CISA KEVNo thewebsitesupply vulnerabilities are listed in CISA KEV.
Priority LOW 22
The GWD Connect plugin for WordPress is vulnerable to missing authorization to limited code execution in all versions up to, and including, 2.9.
CVSS 3.1MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.00273 · Published 2026-05-12 · No fix listed CWE-862
Open these records in search →