Read the docs

gfazioli

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

gfazioli records in CISA KEV

No gfazioli vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2023-26605 CVE-2023-48775 · GHSA-cq22-f7mv-9c42

WordPress WP CleanFix plugin <= 5.6.2 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in Gfazioli WP Cleanfix allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cleanfix: from n/a through 5.6.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00386 Published 2024-12-31 No fix listed CWE-862
TI-2026-20197 CVE-2026-25012 · GHSA-g35p-qgfm-w6v2

WordPress WP Bannerize Pro plugin <= 1.11.0 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in gfazioli WP Bannerize Pro wp-bannerize-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Bannerize Pro: from n/a through <= 1.11.0.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00222 Published 2026-02-03 No fix listed CWE-862
TI-2024-06848 CVE-2024-7388 · GHSA-c6cg-7q2c-x256

WP Bannerize Pro <= 1.9.0 - Authenticated (Editor+) Stored Cross-Site Scripting

Priority LOW 18

The WP Bannerize Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via banner alt data in all versions up to, and including, 1.9.0 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 4.0 Network High privileges User interaction EPSS 0.00261 Published 2024-08-13 No fix listed CWE-79
Open these records in search →