Wp-cirrus Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Wp-cirrus Project records in CISA KEV

No Wp-cirrus Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2023-17025 CVE-2023-34181 · GHSA-97p9-qpmx-cg8j

MEDIUM 40

Cross-Site Request Forgery (CSRF) vulnerability in WP-Cirrus plugin <= 0.6.11 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00309 Published 2023-11-09 No fix listed CWE-352

TI-2023-18507 CVE-2023-36692 · GHSA-8j9h-233m-56jh

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Christian Kramer & Hendrik Thole WP-Cirrus plugin <= 0.6.11 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-08-08 No fix listed CWE-79