Tophive

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Tophive records in CISA KEV

No Tophive vulnerabilities are listed in CISA KEV.

3 records

TI-2024-08455 CVE-2024-9105 · GHSA-hx9w-qrww-76v2

MEDIUM 50

The UltimateAI plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.8.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00575 Published 2024-10-16 No fix listed CWE-288

TI-2026-25086 CVE-2026-32559 · GHSA-vjvh-rjh6-h3qf

MEDIUM 43

Subscriber Arbitrary File Upload in UltimateAI <= 3.1.0 versions.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00479 Published 2026-08-24 No fix listed CWE-434

TI-2024-08454 CVE-2024-9104 · GHSA-8c22-3v87-c9p2

LOW 25

The UltimateAI plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.8.3.

CVSS 3.1MEDIUM 5.6 Network No auth No interaction EPSS 0.00336 Published 2024-10-16 No fix listed CWE-703