Kanbanwp Kanban Boards For Wordpress — known CVE vulnerabilities

Every CVE whose affected-product data names Kanbanwp Kanban Boards For Wordpress, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2023-40606 — CVSS 9.1 (critical): Improper Control of Generation of Code ('Code Injection') vulnerability in Kanban for WordPress Kanban Boards for WordPress.This issue…
• CVE-2023-23884 — CVSS 5.9 (medium): Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kanban for WordPress Kanban Boards for WordPress plugin <= 2.5.20…
• CVE-2023-0873 — CVSS 4.8 (medium): The Kanban Boards for WordPress plugin before 2.5.21 does not sanitise and escape some of its settings, which could allow high privilege…