Read the docs

Wptriggers

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Wptriggers records in CISA KEV

No Wptriggers vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Triggers Lite 2 records MEDIUM

Records

2 records in Wp Triggers Lite · all components

TI-2024-12142 CVE-2024-13094 · GHSA-c75v-42g3-xvcr

WP Triggers Lite <= 2.5.3 - Reflected XSS

Priority MEDIUM 64

The WP Triggers Lite WordPress plugin through 2.5.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege u…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00595 Published 2025-01-27 No fix listed CWE-79
TI-2024-12143 CVE-2024-13095 · GHSA-7jq5-8rmw-j9wh

WP Triggers Lite <= 2.5.3 - Admin+ SQL Injection

Priority MEDIUM 55

The WP Triggers Lite WordPress plugin through 2.5.3 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00314 Published 2025-01-27 No fix listed CWE-89
Open these records in search →