Vendors / thom4 Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now thom4 records in CISA KEV No thom4 vulnerabilities are listed in CISA KEV.
Priority LOW 32
Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in thom4 WP-LESS wp-less allows Retrieve Embedded Sensitive Data.This issue affects WP-LESS: from n/a through <= 1.9.6.
CVSS 3.1 MEDIUM 5.8· Network · No auth · No interaction · EPSS 0.0042 · Published 2025-04-01 · No fix listed CWE-538
Priority LOW 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in thom4 Mindmeister Shortcode mindmeister-shortcode allows DOM-Based XSS.This issue affects Mindmeister Shortcode: from…
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00383 · Published 2025-01-16 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
Critical0 High0 Medium2 Low0 No CVSS0