Vulnerabilities

TI-2025-17732 CVE-2025-23965 · GHSA-rfww-959q-rrcg

WordPress Kopa Nictitate Toolkit plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kopatheme Kopa Nictitate Toolkit kopa-nictitate-toolkit allows Stored XSS.This issue affects Kopa Nictitate Toolkit: f…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00236 Published 2025-01-16 No fix listed CWE-79

TI-2024-20485 CVE-2024-31096 · GHSA-whqv-28jg-ggpr

WordPress Nictitate theme <= 1.1.4 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in kopatheme Nictitate.This issue affects Nictitate: from n/a through 1.1.4.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.002 Published 2024-03-31 No fix listed CWE-352

TI-2022-23384 CVE-2022-47180 · GHSA-q72j-8r2v-vx8x

WordPress Kopa Framework Plugin <= 1.3.5 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Kopa Theme Kopa Framework plugin <= 1.3.5 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00318 Published 2023-05-24 No fix listed CWE-352

Vulnerabilities

Filters

WordPress Kopa Nictitate Toolkit plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability

WordPress Nictitate theme <= 1.1.4 - Cross Site Request Forgery (CSRF) vulnerability

WordPress Kopa Framework Plugin <= 1.3.5 is vulnerable to Cross Site Request Forgery (CSRF)