Gtmetrix

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-37996 HIGH This Week

Cross-Site Request Forgery (CSRF) vulnerability in GTmetrix GTmetrix for WordPress plugin <= 0.4.7 versions. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress CSRF Gtmetrix

NVD

CVSS 3.1

8.8

EPSS

0.2%

CVE-2023-32503 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress XSS Gtmetrix

NVD

CVSS 3.1

6.1

EPSS

0.4%

CVE-2023-23677 MEDIUM This Month

Reflected Cross-Site Scripting (XSS) vulnerability in GTmetrix GTmetrix for WordPress plugin <= 0.4.5 versions. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress XSS Gtmetrix

NVD

CVSS 3.1

6.1

EPSS

0.4%

CVE-2023-37996

EPSS 0% CVSS 8.8

HIGH This Week

WordPress CSRF Gtmetrix

NVD

CVE-2023-32503

EPSS 0% CVSS 6.1

MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress XSS Gtmetrix

NVD

CVE-2023-23677

EPSS 0% CVSS 6.1

MEDIUM This Month

WordPress XSS Gtmetrix

NVD