GrandPlugins

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

GrandPlugins records in CISA KEV

No GrandPlugins vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Avif Uploader 1 record MEDIUM Woo Quick View And Buy Now 1 record LOW

Records

1 record in Avif Uploader · all components

TI-2024-08574 CVE-2024-9238 · GHSA-7pq2-p2r6-3h8r

AVIF & SVG Uploader <= 1.1.0 - Author+ Stored XSS via SVG Uplaod

MEDIUM 58

The AVIF Uploader WordPress plugin before 1.1.1 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00318 Published 2025-05-15 Fixed in 1.1.1 CWE-79

Open these records in search →

Critical	0
High	0
Medium	4
Low	0
No CVSS	0