read and understood project vulnerabilities

Products

• read and understood 3

Latest read and understood project CVEs

Newest publication first

1. CVE-2018-5669 Read and Understood < 2.2 - Cross-Site Request Forgery

   Published 2018-01-13

   High·CVSS 8.8 EPSS 0.59%

   An issue was discovered in the read-and-understood plugin 2.1 for WordPress. CSRF exists via wp-admin/options-general.php.

2. CVE-2018-5668 Read and Understood < 2.2 - Cross-Site Scripting

   Published 2018-01-13

   Medium·CVSS 4.8 EPSS 0.65%

   An issue was discovered in the read-and-understood plugin 2.1 for WordPress. XSS exists via the wp-admin/options-general.php rnu_username_validation_title parameter.

3. CVE-2018-5667 Read and Understood <= 2.1 - Stored Cross-Site Scripting

   Published 2018-01-13

   Medium·CVSS 4.8 EPSS 0.65%

   An issue was discovered in the read-and-understood plugin 2.1 for WordPress. XSS exists via the wp-admin/options-general.php rnu_username_validation_pattern parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.