Read the docs

Verse-o-matic Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Verse-o-matic Project records in CISA KEV

No Verse-o-matic Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record

TI-2021-06755 CVE-2021-24466 · GHSA-3767-6mf5-hjrv

Verse-O-Matic <= 4.1.1 - CSRF to Stored XSS

Priority LOW 27

The Verse-O-Matic WordPress plugin through 4.1.1 does not have any CSRF checks in place, allowing attackers to make logged in administrators do unwanted actions, such as add/edit/delete arbitrary verses and change the se…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00412 Published 2021-08-16 No fix listed CWE-352
Open these records in search →