Kieranoshea

2 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-13001 Dec 02, 06:15 MEDIUM POC This Month

The donation WordPress plugin through 1.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing high privilege users, such as admin to perform SQL injection attacks

PHP WordPress SQLi Donations Kieranoshea

NVD WPScan

CVSS 3.1

4.1

EPSS

0.0%

CVE-2013-2698 May 27, 14:55 MEDIUM This Month

Cross-site request forgery (CSRF) vulnerability in the Calendar plugin before 1.3.3 for WordPress allows remote attackers to hijack the authentication of users for requests that add a calendar entry. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.

WordPress CSRF Calendar Wordpress Plugin Kieranoshea

NVD

CVSS 2.0

6.8

EPSS

0.1%

CVE-2025-13001

EPSS 0% CVSS 4.1

MEDIUM POC This Month

The donation WordPress plugin through 1.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing high privilege users, such as admin to perform SQL injection attacks

PHP WordPress SQLi +2

NVD WPScan

CVE-2013-2698

EPSS 0% CVSS 6.8

MEDIUM This Month

WordPress CSRF Calendar +2

NVD