Wp-forecast Project Wp-forecast — known CVE vulnerabilities

Every CVE whose affected-product data names Wp-forecast Project Wp-forecast, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2022-35725 — CVSS 4.8 (medium): Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Hans Matzen's wp-forecast plugin <= 7.5 at WordPress.