xola

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

xola records in CISA KEV

No xola vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2025-17722 CVE-2025-23955 · GHSA-qr8g-7hrw-635q

WordPress Xola plugin <= 1.6 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in xola Xola xola-bookings-for-tours-activities allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Xola: from n/a through <= 1.6.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00258 Published 2025-01-16 No fix listed CWE-862

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0