Read the docs

tstafford

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

tstafford records in CISA KEV

No tstafford vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-21871 CVE-2025-30596 · GHSA-fhr7-jm6m-fgjx

WordPress include-file plugin <= 1 - Arbitrary File Download Vulnerability

Priority LOW 30

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in tstafford include-file include-file allows Path Traversal.This issue affects include-file: from n/a through <= 1.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00557 Published 2025-04-03 No fix listed CWE-22
TI-2025-21870 CVE-2025-30595 · GHSA-f9mf-wjq9-xxwh

WordPress include-file plugin <= 1 Cross Site Scripting (XSS) Vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tstafford include-file include-file allows Stored XSS.This issue affects include-file: from n/a through <= 1.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00281 Published 2025-03-24 No fix listed CWE-79
Open these records in search →