wp2fac

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

wp2fac records in CISA KEV

No wp2fac vulnerabilities are listed in CISA KEV.

1 record

TI-2023-30155 CVE-2023-53872 · GHSA-pmxp-m64w-v7f6

MEDIUM 50

Wp2Fac 1.0 contains an OS command injection vulnerability in the send.php endpoint that allows remote attackers to execute arbitrary system commands.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01122 Published 2025-12-15 No fix listed CWE-78