Archetyped

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Archetyped records in CISA KEV

No Archetyped vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Simple Lightbox 1 record MEDIUM

Records

6 records

TI-2025-03088 CVE-2025-3516 · GHSA-x4jw-p584-84v2

Simple Lightbox < 2.9.4 - Contributor+ Stored XSS

MEDIUM 60

The Simple Lightbox WordPress plugin before 2.9.4 does not validate and escape some of its attributes before outputting them back in a page/post, which could allow users with the contributor role and above to perform Sto…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00313 Published 2025-05-16 Fixed in 2.9.4 CWE-79

TI-2024-21457 CVE-2024-32570 · GHSA-pp8r-cm3h-q624

WordPress Cornerstone plugin <= 0.8.0 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Archetyped Cornerstone allows Reflected XSS.This issue affects Cornerstone: from n/a through 0.8.0.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00333 Published 2024-04-18 No fix listed CWE-79

TI-2024-18603 CVE-2024-28002 · GHSA-q5gr-4pxm-mggp

WordPress Cornerstone plugin <= 0.8.0 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00375 Published 2024-03-28 No fix listed CWE-79

TI-2024-18602 CVE-2024-28001 · GHSA-m4cf-5m9h-j563

WordPress Favicon Rotator plugin <= 1.2.10 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Archetyped Favicon Rotator allows Reflected XSS.This issue affects Favicon Rotator: from n/a through 1.2.10.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00375 Published 2024-03-28 No fix listed CWE-79

TI-2026-30908 CVE-2026-42649 · GHSA-px3j-8gx4-6v7c

WordPress Favicon Rotator plugin <= 1.2.11 - Cross Site Scripting (XSS) vulnerability

LOW 30

Unauthenticated Cross Site Scripting (XSS) in Favicon Rotator <= 1.2.11 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00175 Published 2026-06-15 No fix listed CWE-79

TI-2026-70135 CVE-2026-5725 · GHSA-m5rr-w32q-pc8f

Reflected cross-site scripting in Favicon Rotator WordPress plugin

LOW 26

The Favicon Rotator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'fvrt_' prefixed request parameters in all versions up to, and including, 1.2.11 due to insufficient input sanitization and…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00168 Published 2026-10-10 No fix listed CWE-79

Open these records in search →

Critical	0
High	4
Medium	2
Low	0
No CVSS	0