verbb records

10 published records for vendor verbb.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 100%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

10 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
36Monitor	CVE-2020-13485No exploit	The Knock Knock plugin before 1.2.8 for Craft CMS allows IP Whitelist bypass via an X-Forwarded-For HTTP header.verbb · knock knock · CWE-697 Pre-auth	Critical9.1	—	1.4%	May 25, 2020
35Monitor	CVE-2020-13458No exploit	An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS.verbb · image resizer · CWE-352 Pre-auth CSRF	High8.8	—	0.5%	May 25, 2020
26Monitor	CVE-2020-13868No exploit	An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS.verbb · comments · CWE-352 Pre-auth CSRF	Medium6.5	—	0.4%	Jun 5, 2020
24Monitor	CVE-2020-13486No exploit	The Knock Knock plugin before 1.2.8 for Craft CMS allows malicious redirection.verbb · knock knock · CWE-601 Pre-auth Open redirect	Medium6.1	—	0.7%	May 25, 2020
21Monitor	CVE-2020-13869No exploit	An issue was discovered in the Comments plugin before 1.5.6 for Craft CMS.verbb · comments · CWE-79 XSS	Medium5.4	—	0.5%	Jun 5, 2020
21Monitor	CVE-2020-13459No exploit	An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS.verbb · image resizer · CWE-79 XSS	Medium5.4	—	0.5%	May 25, 2020
21Monitor	CVE-2020-13870No exploit	An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS.verbb · comments · CWE-79 XSS	Medium5.4	—	0.5%	Jun 5, 2020
21Monitor	CVE-2025-32427No exploit	Formie has a XSS vulnerability for importing formsverbb · formie · CWE-79 Pre-auth XSS	Medium5.3	—	0.2%	Apr 11, 2025
21Monitor	CVE-2025-32426No exploit	Formie has a XSS vulnerability for email notification content for previewverbb · formie · CWE-79 XSS	Medium5.4	—	0.2%	Apr 11, 2025
17Monitor	CVE-2024-35191No exploit	verbb/formie Server-Side Template Injection for variable-enabled settingsverbb · formie · CWE-1336 RCE SSTI	Medium4.4	—	0.3%	May 20, 2024

CVE-2020-13485
36Monitor
The Knock Knock plugin before 1.2.8 for Craft CMS allows IP Whitelist bypass via an X-Forwarded-For HTTP header.
CriticalCVSS 9.1No exploitEPSS 1%
- Pre-auth
verbb · knock knockMay 25, 2020
CVE-2020-13458
35Monitor
An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS.
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
verbb · image resizerMay 25, 2020
CVE-2020-13868
26Monitor
An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS.
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
- CSRF
verbb · commentsJun 5, 2020
CVE-2020-13486
24Monitor
The Knock Knock plugin before 1.2.8 for Craft CMS allows malicious redirection.
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- Open redirect
verbb · knock knockMay 25, 2020
CVE-2020-13869
21Monitor
An issue was discovered in the Comments plugin before 1.5.6 for Craft CMS.
MediumCVSS 5.4No exploitEPSS 1%
- XSS
verbb · commentsJun 5, 2020
CVE-2020-13459
21Monitor
An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS.
MediumCVSS 5.4No exploitEPSS 1%
- XSS
verbb · image resizerMay 25, 2020
CVE-2020-13870
21Monitor
An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS.
MediumCVSS 5.4No exploitEPSS 1%
- XSS
verbb · commentsJun 5, 2020
CVE-2025-32427
21Monitor
Formie has a XSS vulnerability for importing forms
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- XSS
verbb · formieApr 11, 2025
CVE-2025-32426
21Monitor
Formie has a XSS vulnerability for email notification content for preview
MediumCVSS 5.4No exploitEPSS 0%
- XSS
verbb · formieApr 11, 2025
CVE-2024-35191
17Monitor
verbb/formie Server-Side Template Injection for variable-enabled settings
MediumCVSS 4.4No exploitEPSS 0%
- RCE
- SSTI
verbb · formieMay 20, 2024