thunderbax

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

thunderbax records in CISA KEV

No thunderbax vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2025-18741 CVE-2025-25072 · GHSA-4hhr-vj6j-29qh

WordPress WP Admin Custom Page plugin <= 1.5.0 - CSRF to Stored XSS vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in thunderbax WP Admin Custom Page wp-admin-custom-page allows Stored XSS.This issue affects WP Admin Custom Page: from n/a through <= 1.5.0.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00155 Published 2025-02-07 No fix listed CWE-352

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0