Themeist I Recommend This — known CVE vulnerabilities

Every CVE whose affected-product data names Themeist I Recommend This, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2014-10376 — CVSS 9.8 (critical): The i-recommend-this plugin before 3.7.3 for WordPress has SQL injection.
• CVE-2014-125099 — CVSS 6.3 (medium): A vulnerability has been found in I Recommend This Plugin up to 3.7.2 on WordPress and classified as critical. Affected by this…
• CVE-2023-23673 — CVSS 5.9 (medium): Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Harish Chouhan, Themeist I Recommend This plugin <= 3.8.3 versions.
• CVE-2023-28696 — CVSS 4.3 (medium): Cross-Site Request Forgery (CSRF) vulnerability in Harish Chouhan, Themeist I Recommend This allows Cross Site Request Forgery.This issue…