Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Webmaster-source records in CISA KEVNo Webmaster-source vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 42
The gocodes plugin through 1.3.5 for WordPress has wp-admin/tools.php gcid SQL injection.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01944 · Published 2019-09-20 · No fix listed CWE-89
Priority LOW 27
The gocodes plugin through 1.3.5 for WordPress has wp-admin/tools.php deletegc XSS.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.01044 · Published 2019-09-20 · No fix listed CWE-79
Open these records in search →