truefy

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

truefy records in CISA KEV

No truefy vulnerabilities are listed in CISA KEV.

1 record

TI-2025-12941 CVE-2025-14161 · GHSA-7f59-vhc3-394j

LOW 19

The Truefy Embed plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.0.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00151 Published 2025-12-12 No fix listed CWE-352