Every CVE whose affected-product data names Toolstack Sully, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (4)
CVE-2024-5034 — CVSS 8.8 (high): The SULly WordPress plugin before 4.3.1 does not have CSRF checks in some places, which could allow attackers to make logged in users…
CVE-2024-5151 — CVSS 7.1 (high): The SULly WordPress plugin before 4.3.1 does not sanitise and escape some of its settings, which could allow high privilege users such as…
CVE-2024-5033 — CVSS 5.9 (medium): The SULly WordPress plugin before 4.3.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which…
CVE-2024-5032 — CVSS 4.7 (medium): The SULly WordPress plugin before 4.3.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a…