Read the docs

Web Updates KMU

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Web Updates KMU records in CISA KEV

No Web Updates KMU vulnerabilities are listed in CISA KEV.

Records

1 record

Priority MEDIUM 56

Custom Tables plugin for WordPress before 3.4.6 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the unsanitized 'key' parameter in iframe.php.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00269 Published 2026-10-20 Fixed in 3.4.6 CWE-79
Open these records in search →