WebFactory vendor intelligence

WebFactory Known Exploited Vulnerabilities

Track evidence-backed exploitation affecting WebFactory products, including the gap beyond CISA KEV, confidence assessments, sensor observations, and practical response context.

Browse KEV feed
Total KEVs
2
Known exploited vulnerabilities affecting WebFactory products
In CISA KEV
0
Records also listed in the official catalog
Beyond CISA KEV
2
Additional exploited vulnerabilities absent from CISA KEV
Sensor Observed
0
WebFactory KEVs with sensor-observed exploitation activity

Review WebFactory exploitation against the products you run

Both exploited WebFactory vulnerabilities tracked by Previdian are not in CISA KEV.

0%
Covered by CISA
100%
Beyond CISA
2
Product families

Attested WebFactory vulnerabilities

2 known exploited vulnerabilities in this exploited-vulnerability portfolio. Search, then narrow it to official CISA coverage or the additional records Previdian tracks beyond the catalog.

How exploitation is verified
CVE / description Product Confidence CISA KEV Added
CVE-2019-19915

The "301 Redirects - Easy Redirect Manager" plugin before 2.45 for WordPress allows users (with subscriber or greater access) to modify, delete, or...

301 Redirects - Easy Redirect Manager High Beyond CISA 19 Dec 2019
CVE-2020-6167

A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows a CSRF attack to enable maintenance mode, inject...

Minimal Coming Soon & Maintenance Mode High Beyond CISA 08 Jan 2020

Showing 2 of 2 on this page (2 WebFactory known exploited vulnerabilities).

Recurring weakness patterns

Cross-site request forgery (csrf) and incorrect permission assignment for critical resource account for three mapped occurrences across this WebFactory KEV portfolio.

Browse all KEVs →