Read the docs

Think201

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Think201 records in CISA KEV

No Think201 vulnerabilities are listed in CISA KEV.

Records

9 records

TI-2024-36332 CVE-2024-54243 · GHSA-hx8r-9859-p3wh

WordPress Echoza plugin <= 0.1.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Think201 Echoza echoza allows Stored XSS.This issue affects Echoza: from n/a through <= 0.1.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.004 Published 2024-12-13 No fix listed CWE-79
TI-2025-16244 CVE-2025-22340 · GHSA-rm3r-mw49-623x

WordPress Data Dash plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Think201 Data Dash data-dash allows Stored XSS.This issue affects Data Dash: from n/a through <= 1.2.3.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00274 Published 2025-04-17 No fix listed CWE-79
TI-2024-36335 CVE-2024-54246 · GHSA-5gv9-5mf3-9rpm

WordPress FAQs plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Think201 FAQs faqs allows Stored XSS.This issue affects FAQs: from n/a through <= 1.0.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00385 Published 2024-12-13 No fix listed CWE-79
TI-2024-36334 CVE-2024-54245 · GHSA-c42x-7v9q-fg7m

WordPress Clients plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Think201 Clients clients allows Stored XSS.This issue affects Clients: from n/a through <= 1.1.4.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00408 Published 2024-12-13 No fix listed CWE-79
TI-2024-36333 CVE-2024-54244 · GHSA-59j7-m658-8wh4

WordPress Easy Replace plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Think201 Easy Replace easy-replace allows Stored XSS.This issue affects Easy Replace: from n/a through <= 1.3.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0039 Published 2024-12-13 No fix listed CWE-79
TI-2025-22883 CVE-2025-31746 · GHSA-2c7r-qfhq-q2f5

WordPress Clients plugin <= 1.1.4 - Broken Access Control vulnerability

Priority LOW 28

Missing Authorization vulnerability in Think201 Clients clients allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clients: from n/a through <= 1.1.4.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00346 Published 2025-04-03 No fix listed CWE-862
Open these records in search →