Kiboit vulnerabilities
We track 2 vulnerabilities in Kiboit products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 15, 2026.
2vulnerabilities
1critical
1high
0exploited
8.6average CVSS score
Latest Kiboit vulnerabilities
- 7.3 High severity
PhastPress: Server-Side Request Forgery
The PhastPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.10 This is due to the scripts service endpoint constructing its URL whitelist dynamically from the attacker-controlled HTTP 'Host' header.
- 9.8 Critical severity
PhastPress: Improper Neutralization of Null Byte or NUL Character
The PhastPress plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Read via null byte injection in all versions up to, and including, 3.7. This is due to a discrepancy between the extension validation in `getExtensionForURL()` which operates o