Replyable vulnerabilities
We track 1 vulnerability in Replyable products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 6, 2023.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Replyable vulnerabilities
- 8.8 High severity
Replyable: Cross-Site Request Forgery
The Replyable WordPress plugin before 2.2.10 does not validate the class name submitted by the request when instantiating an object in the prompt_dismiss_notice action and also lacks CSRF check in the related action. This could allow any authenticated users, s