xtreeme

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

xtreeme records in CISA KEV

No xtreeme vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-03084 CVE-2026-3576 · GHSA-jjq9-3x6f-75pj

Planyo online reservation system <= 3.0 - Unauthenticated Server-Side Request Forgery via 'ulap_url' Parameter

MEDIUM 49

The Planyo Online Reservation System plugin for WordPress is vulnerable to Server-Side Request Forgery leading to Local File Inclusion in all versions up to, and including, 3.0.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.08808 Published 2026-07-11 No fix listed CWE-20

TI-2025-22948 CVE-2025-31811 · GHSA-9fr8-m4rq-565w

WordPress Planyo online reservation system plugin <= 3.1 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in xtreeme Planyo online reservation system planyo-online-reservation-system allows Stored XSS.This issue affects Planyo…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00368 Published 2025-04-01 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0