Crazy Bone Project Crazy Bone — known CVE vulnerabilities

Every CVE whose affected-product data names Crazy Bone Project Crazy Bone, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2015-9430 — CVSS 6.1 (medium): The crazy-bone plugin before 0.6.0 for WordPress has XSS via the User-Agent HTTP header.
• CVE-2022-0385 — CVSS 6.1 (medium): The Crazy Bone WordPress plugin through 0.6.0 does not sanitise and escape the username submitted via the login from when displaying them…