Vendors / WP Zone Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 2 CVSS 7.0–8.9
Exploited now WP Zone records in CISA KEV No WP Zone vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 38
Cross-Site Request Forgery (CSRF) vulnerability in WP Zone Potent Donations for WooCommerce plugin <= 1.1.9 versions.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00341 · Published 2023-07-10 · No fix listed CWE-352
Priority LOW 37
Cross-Site Request Forgery (CSRF) vulnerability in WP Zone Inline Image Upload for BBPress.This issue affects Inline Image Upload for BBPress: from n/a through 1.1.18.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00227 · Published 2024-01-05 · No fix listed CWE-352
Priority LOW 30
Unauthenticated Sensitive Data Exposure in Custom CSS and JavaScript <= 2.0.16 versions.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0033 · Published 2026-08-06 · No fix listed CWE-201
Open these records in search → All records by CVSS severity
Critical0 High2 Medium1 Low0 No CVSS0