Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
wpcoachify records in CISA KEVNo wpcoachify vulnerabilities are listed in CISA KEV.
Priority LOW 30
Missing Authorization vulnerability in wpcoachify Coachify coachify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Coachify: from n/a through <= 1.1.5.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00322 · Published 2026-02-19 · No fix listed CWE-862
Priority LOW 23
Cross-Site Request Forgery (CSRF) vulnerability in wpcoachify Coachify coachify allows Cross Site Request Forgery.This issue affects Coachify: from n/a through <= 1.1.5.
CVSS 3.1MEDIUM 5.4· Network · No auth · User interaction · EPSS 0.00124 · Published 2026-02-19 · No fix listed CWE-352
Priority LOW 19
Cross-Site Request Forgery (CSRF) vulnerability in wpcoachify Coachify coachify allows Cross Site Request Forgery.This issue affects Coachify: from n/a through <= 1.0.7.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00178 · Published 2025-01-02 · No fix listed CWE-352
