Vendors / WPGrim Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 3 CVSS 7.0–8.9
Exploited now WPGrim records in CISA KEV No WPGrim vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 40
Cross-Site Request Forgery (CSRF) vulnerability in WPGrim Dynamic XML Sitemaps Generator for Google plugin <= 1.3.3 versions.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00301 · Published 2023-11-12 · No fix listed CWE-352
Priority LOW 38
Cross-Site Request Forgery (CSRF) vulnerability in WPGrim Classic Editor and Classic Widgets plugin <= 1.2.5 versions.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00309 · Published 2023-11-12 · No fix listed CWE-352
Priority LOW 37
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Grim Classic Editor and Classic Widgets classic-editor-and-classic-widgets allows SQL Injection.This issue affects…
CVSS 3.1 HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00419 · Published 2024-10-17 · No fix listed CWE-89
Open these records in search → All records by CVSS severity
Critical0 High3 Medium0 Low0 No CVSS0