Gmace Project Gmace — known CVE vulnerabilities

Every CVE whose affected-product data names Gmace Project Gmace, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2023-1509 — CVSS 8.8 (high): The GMAce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.2. This is due to missing…
• CVE-2023-23861 — CVSS 5.4 (medium): Cross-Site Request Forgery (CSRF) vulnerability in German Mesky GMAce plugin <= 1.5.2 versions.