Read the docs

trustyplugins

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

trustyplugins records in CISA KEV

No trustyplugins vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2024-03260 CVE-2024-3495 · GHSA-5p44-j78m-mc5m

Country State City Dropdown CF7 <= 2.7.2 - Unauthenticated SQL Injection

Priority MEDIUM 64

The Country State City Dropdown CF7 plugin for WordPress is vulnerable to SQL Injection via the ‘cnt’ and 'sid' parameters in versions up to, and including, 2.7.2 due to insufficient escaping on the user supplied paramet…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.13618 Published 2024-05-22 No fix listed CWE-89
TI-2024-10077 CVE-2024-10871 · GHSA-qwvp-243h-hmwf

Category Ajax Filter <= 2.8.2 - Unauthenticated Local File Inclusion

Priority MEDIUM 50

The Category Ajax Filter plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.8.2 via the 'params[caf-post-layout]' parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00787 Published 2024-11-09 No fix listed CWE-98
TI-2025-23650 CVE-2025-32585 · GHSA-g97f-x473-qch6

WordPress Shop Products Filter Plugin <= 1.2 - Local File Inclusion vulnerability

Priority LOW 37

Path Traversal: '.../...//' vulnerability in Trusty Plugins Shop Products Filter trusty-woo-products-filter allows PHP Local File Inclusion.This issue affects Shop Products Filter: from n/a through <= 1.2.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00958 Published 2025-04-11 No fix listed CWE-35
TI-2024-03281 CVE-2024-3520 · GHSA-h3f8-rhr3-rhcx

Country State City Dropdown CF7 <= 2.7.1 - Missing Authorization

Priority LOW 20

The Country State City Dropdown CF7 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tc_csca_patch_settings function in all versions up to, and including, 2…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00445 Published 2024-05-02 No fix listed CWE-862
Open these records in search →