Every CVE whose affected-product data names Hasthemes Wp News, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (1)
CVE-2023-0502 — CVSS 6.5 (medium): The WP News WordPress plugin through 1.1.9 does not have CSRF check when activating plugins, which could allow attackers to make logged in…