Known vulnerabilities in KKProgressbar2 Free - advanced progress bars

Vendor: Krzysztof Furtak
Software: KKProgressbar2 Free - advanced progress bars
Software CPE: cpe:2.3:a:krzy-siek:kkprogressbar:*:*:*:*:*:wordpress:*:*
Website: https://profiles.wordpress.org/krzy-siek/
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting KKProgressbar2 Free - advanced progress bars KKProgressbar2 Free - advanced progress bars is affected by 2 known vulnerabilities: 2 medium Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118138 - Cross-Site Request Forgery (CSRF)
CVE-2024-4534		 CWE-352 Medium
No
No
 - 06.11.2025 SB2025110607
#VU111069 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-4533		 CWE-89 Medium
No
No
 - 11.06.2025 SB2025061140
SB2025061142