WP Reactions, LLC

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

WP Reactions, LLC records in CISA KEV

No WP Reactions, LLC vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wp Reactions Lite 2 records MEDIUM

Records

2 records

TI-2023-15869 CVE-2023-32587 · GHSA-x327-w9wh-hfg2

WordPress WP Reactions Lite Plugin <= 1.3.8 is vulnerable to Cross Site Request Forgery (CSRF)

MEDIUM 40

Cross-Site Request Forgery (CSRF) vulnerability in WP Reactions, LLC WP Reactions Lite plugin <= 1.3.8 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00319 Published 2023-11-09 No fix listed CWE-352

TI-2021-07005 CVE-2021-24723 · GHSA-982c-6j92-25r3

WP Reactions Lite < 1.3.6 - Authenticated Stored Cross Site Scripting

LOW 25

The WP Reactions Lite WordPress plugin before 1.3.6 does not properly sanitize inputs within wp-admin pages, allowing users with sufficient access to inject XSS payloads within /wp-admin/ pages.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0065 Published 2021-11-01 Fixed in 1.3.6 CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0