Vendors / Webarea Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now Webarea records in CISA KEV No Webarea vulnerabilities are listed in CISA KEV.
Priority LOW 39
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Webarea Background animation blocks background-animation-blocks allows PHP Local File Inclusion.Thi…
CVSS 3.1 HIGH 8.1· Network · No auth · No interaction · EPSS 0.00938 · Published 2025-01-22 · No fix listed CWE-98
Priority LOW 19
The Fast & Fancy Filter – 3F plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 1.2.2.
CVSS 3.1 MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.0018 · Published 2026-04-22 · No fix listed CWE-352
Open these records in search → All records by CVSS severity
Critical0 High1 Medium1 Low0 No CVSS0