Read the docs

Ciprian Popescu

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Ciprian Popescu records in CISA KEV

No Ciprian Popescu vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Block For Font Awesome 2 records LOW Imagepress 2 records LOW Youtube Playlist Player 2 records LOW Modern Design Library 1 record LOW Portable-phpmyadmin 1 record MEDIUM

Records

9 records

TI-2024-34598 CVE-2024-51684 · GHSA-fc3r-7v33-7x96

WordPress W3P SEO plugin < 1.8.6 - CSRF to Stored XSS vulnerability

Priority LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in Ciprian Popescu W3P SEO wp-perfect-plugin allows Stored XSS.This issue affects W3P SEO: from n/a through < 1.8.6.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00168 Published 2024-11-14 No fix listed CWE-352
TI-2025-05270 CVE-2025-5842 · GHSA-7538-cfh9-c2g6

Modern Design Library <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via class Parameter

Priority LOW 28

The Modern Design Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘class’ parameter in all versions up to, and including, 1.1.4 due to insufficient input sanitization and output escaping…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00318 Published 2025-06-26 No fix listed CWE-79
TI-2024-23574 CVE-2024-35705 · GHSA-w7w6-4q7c-7ccc

WordPress Block for Font Awesome plugin <= 1.4.4 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Ciprian Popescu Block for Font Awesome allows Stored XSS.This issue affects Block for Font Awesome: from n/a th…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00261 Published 2024-06-08 No fix listed CWE-79
TI-2024-09073 CVE-2024-9776 · GHSA-w6g8-4xp6-6cr3

ImagePress - Image Gallery <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings

Priority LOW 22

The ImagePress – Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00357 Published 2024-10-12 No fix listed CWE-79
Open these records in search →