Read the docs

gallagherwebsitedesign

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

gallagherwebsitedesign records in CISA KEV

No gallagherwebsitedesign vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Coronavirus (covid-19) Notice Message 1 record MEDIUM

Records

2 records

TI-2025-00529 CVE-2025-0629 · GHSA-q6qg-c79q-f6q2

Coronavirus (COVID-19) Notice Message <= 1.1.2 - Admin+ Stored XSS

Priority MEDIUM 55

The Coronavirus (COVID-19) Notice Message WordPress plugin through 1.1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting atta…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00267 Published 2025-03-11 No fix listed CWE-79
TI-2026-01578 CVE-2026-1913 · GHSA-j2r9-9g62-pcp4

Cross-site scripting in gallagherwebsitedesign Gallagher Website Design

Priority LOW 28

The Gallagher Website Design plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's login_link shortcode in all versions up to, and including, 2.6.4 due to insufficient input sanitization and…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00254 Published 2026-04-22 No fix listed CWE-79
Open these records in search →