Krzysztof-furtak Kkprogressbar2 — known CVE vulnerabilities

Every CVE whose affected-product data names Krzysztof-furtak Kkprogressbar2, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2024-4535 — CVSS 8.8 (high): The KKProgressbar2 Free WordPress plugin through 1.1.4.2 does not have CSRF checks in some places, which could allow attackers to make…
• CVE-2024-4533 — CVSS 6.5 (medium): The KKProgressbar2 Free WordPress plugin through 1.1.4.2 does not sanitize and escape a parameter before using it in a SQL statement…
• CVE-2024-4534 — CVSS 6.1 (medium): The KKProgressbar2 Free WordPress plugin through 1.1.4.2 does not have CSRF check in some places, and is missing sanitisation as well as…