thoefter

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

thoefter records in CISA KEV

No thoefter vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-02877 CVE-2026-3334 · GHSA-ghq8-9c7r-622r

CMS Commander <= 2.288 - Authenticated (Custom+) SQL Injection via 'or_blogname' Parameter

MEDIUM 40

The CMS Commander plugin for WordPress is vulnerable to SQL Injection via the 'or_blogname', 'or_blogdescription', and 'or_admin_email' parameters in all versions up to, and including, 2.288.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00363 Published 2026-03-21 No fix listed CWE-89

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0