Never5 records

8 published records for vendor never5.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

8 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
24Monitor	CVE-2015-9361No exploit	The Related Posts plugin before 1.8.2 for WordPress has XSS via add_query_arg() and remove_query_arg().never5 · related posts · CWE-79 Pre-auth XSS	Medium6.1	—	1.0%	Aug 28, 2019
24Monitor	CVE-2015-9362No exploit	The Post Connector plugin before 1.0.4 for WordPress has XSS via add_query_arg() and remove_query_arg().never5 · post connector · CWE-79 Pre-auth XSS	Medium6.1	—	0.9%	Aug 28, 2019
24Monitor	CVE-2015-9296No exploit	The download-monitor plugin before 1.7.1 for WordPress has XSS related to add_query_arg.never5 · download monitor · CWE-79 Pre-auth XSS	Medium6.1	—	0.9%	Aug 13, 2019
21Monitor	CVE-2022-3506Proof of concept	Cross-site Scripting (XSS) - Stored in barrykooij/related-posts-for-wpnever5 · related posts · CWE-79 XSS	Medium5.4	—	1.2%	Oct 14, 2022
21Monitor	CVE-2021-24180No exploit	Related Posts for WordPress < 2.0.4 - Authenticated Reflected Cross-Site Scripting (XSS)never5 · related posts · CWE-79 XSS	Medium5.4	—	0.6%	Apr 5, 2021
21Monitor	CVE-2024-0592No exploit	Related Posts for WordPress <= 2.2.1 - Cross-Site Request Forgerynever5 · related posts · CWE-352 Pre-auth CSRF	Medium5.4	—	0.3%	Mar 13, 2024
19Monitor	CVE-2021-24482No exploit	Related Posts for WordPress <= 2.0.4 - Authenticated Stored XSS & XFSnever5 · related posts · CWE-79 XSS	Medium4.8	—	0.7%	Jul 19, 2021
19Monitor	CVE-2023-28931No exploit	WordPress Post Connector Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)never5 · post connector · CWE-79 XSS	Medium4.8	—	0.4%	Aug 8, 2023

CVE-2015-9361
24Monitor
The Related Posts plugin before 1.8.2 for WordPress has XSS via add_query_arg() and remove_query_arg().
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
never5 · related postsAug 28, 2019
CVE-2015-9362
24Monitor
The Post Connector plugin before 1.0.4 for WordPress has XSS via add_query_arg() and remove_query_arg().
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
never5 · post connectorAug 28, 2019
CVE-2015-9296
24Monitor
The download-monitor plugin before 1.7.1 for WordPress has XSS related to add_query_arg.
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
never5 · download monitorAug 13, 2019
CVE-2022-3506
21Monitor
Cross-site Scripting (XSS) - Stored in barrykooij/related-posts-for-wp
MediumCVSS 5.4Proof of conceptEPSS 1%
- XSS
never5 · related postsOct 14, 2022
CVE-2021-24180
21Monitor
Related Posts for WordPress < 2.0.4 - Authenticated Reflected Cross-Site Scripting (XSS)
MediumCVSS 5.4No exploitEPSS 1%
- XSS
never5 · related postsApr 5, 2021
CVE-2024-0592
21Monitor
Related Posts for WordPress <= 2.2.1 - Cross-Site Request Forgery
MediumCVSS 5.4No exploitEPSS 0%
- Pre-auth
- CSRF
never5 · related postsMar 13, 2024
CVE-2021-24482
19Monitor
Related Posts for WordPress <= 2.0.4 - Authenticated Stored XSS & XFS
MediumCVSS 4.8No exploitEPSS 1%
- XSS
never5 · related postsJul 19, 2021
CVE-2023-28931
19Monitor
WordPress Post Connector Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 4.8No exploitEPSS 0%
- XSS
never5 · post connectorAug 8, 2023