ice00 has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 7.2 (high).

CVEs per month

Last 12 months, by publish date

1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10

Exploited share: 0% vs 1% corpus
Median CVSS: 7.2
Publish → KEV: —
Last 90 days: 2 prev 0

Weakness classes

CWE-79 2

Products

NewStatPress 2

Follow ice00:RSS feed Save a search →Embed badge ↗

Total CVEs

Critical

CISA KEV

Exploited

Worst active — by depth score

ice00 vulnerabilities

CVEs affecting ice00, newest first. Open any entry for full detail, references, and exploit status.

2 CVEsRSS

CVE-2026-101924High· 7.2

2w ago

The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.4.5 via the 'Last referrers' meta box on the plugin's Overview admin page

The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.4.5 via the 'Last referrers' meta box on the plugin's Overview admin page. This is due to insufficient output escaping…

▾ Twilightice00 · NewStatPressEPSS 0.31%via NVD

CVE-2026-100153High· 7.2

2w ago

The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'QUERY_STRING / REQUEST_URI' parameter in all versions up to, and including, 1.4.5 due to insufficient input sanitization and output escaping

The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'QUERY_STRING / REQUEST_URI' parameter in all versions up to, and including, 1.4.5 due to insufficient input sanitization and output escaping. Thi…

▾ Twilightice00 · NewStatPressEPSS 0.31%via NVD