Vendors / mra13 Records 89 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 5
CVSS high 20
Exploited now mra13 records in CISA KEV No mra13 vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Records 3 records in Category Specific Rss Feed Subscription · all components
Priority MEDIUM 40
Cross-site request forgery (CSRF) vulnerability in Category Specific RSS feed Subscription version v2.0 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00846 · Published 2019-09-12 · No fix listed CWE-352
Priority LOW 38
Cross-Site Request Forgery (CSRF) vulnerability in Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin <= v2.1 versions.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00271 · Published 2023-05-03 · No fix listed CWE-352
Priority LOW 27
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin <= v2.2 versions.
CVSS 3.1 MEDIUM 5.9· Network · High privileges · User interaction · EPSS 0.00369 · Published 2023-05-12 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
5 20 64 0 0
