Vendors / uPress Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now uPress records in CISA KEV No uPress vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 38
Cross-Site Request Forgery (CSRF) vulnerability in uPress Enable Accessibility plugin <= 1.4 versions.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00256 · Published 2023-05-25 · No fix listed CWE-352
Priority LOW 38
Cross-Site Request Forgery (CSRF) vulnerability in Pretty Links plugin <= 3.4.0 versions.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.003 · Published 2023-05-25 · No fix listed CWE-352
Priority LOW 27
The Enable Accessibility plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all versions up to, and includin…
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00299 · Published 2025-01-07 · No fix listed CWE-79
Priority LOW 20
Missing Authorization vulnerability in uPress Booter booter-bots-crawlers-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booter: from n/a through <= 1.5.7.
CVSS 3.1 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00261 · Published 2026-01-23 · No fix listed CWE-862
Open these records in search → All records by CVSS severity
0 2 2 0 0
THREATIST.IORead the docs