eflyjason

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

eflyjason records in CISA KEV

No eflyjason vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2024-11632 CVE-2024-12535 · GHSA-r7fx-x4q2-hqhr

Host PHP Info <= 1.0.4 - Missing Authorization to Unauthenticated Sensitive Information Disclosure

MEDIUM 44

The Host PHP Info plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when including the 'phpinfo' function in all versions up to, and including, 1.0.4.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00596 Published 2025-01-07 No fix listed CWE-862

TI-2025-10884 CVE-2025-11873 · GHSA-7932-cr4g-c5xw

WP BBCode <= 1.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

LOW 28

The WP BBCode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'url' shortcode in all versions up to, and including, 1.8.1 due to insufficient input sanitization and output escaping on u…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00235 Published 2025-11-11 No fix listed CWE-79

TI-2025-09359 CVE-2025-10194 · GHSA-jj7h-cmmw-f32p

Shortcode Button <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

LOW 28

The Shortcode Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'button' shortcode in all versions up to, and including, 1.1.9 due to insufficient input sanitization and output esc…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00297 Published 2025-10-15 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0