Read the docs

JS Morisset

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

JS Morisset records in CISA KEV

No JS Morisset vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2025-36321 CVE-2025-58653 · GHSA-9f7r-qxm8-pmqc

WordPress JSM file_get_contents() Shortcode Plugin <= 2.7.1 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JS Morisset JSM file_get_contents() Shortcode wp-file-get-contents allows Stored XSS.This issue affects JSM file_get_c…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00215 Published 2025-09-22 No fix listed CWE-79
TI-2025-18306 CVE-2025-24589 · GHSA-fq4m-wxv9-xm4c

WordPress JSM Show Post Metadata plugin <= 4.6.0 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in JS Morisset JSM Show Post Metadata jsm-show-post-meta allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JSM Show Post Metadata: from n/a thr…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0044 Published 2025-01-24 No fix listed CWE-862
TI-2024-37213 CVE-2024-56243 · GHSA-q52w-pcvj-5fw4

WordPress WPSSO Core plugin <= 18.18.1 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in JS Morisset WPSSO Core wpsso allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPSSO Core: from n/a through <= 18.18.1.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0029 Published 2025-01-02 No fix listed CWE-862
Open these records in search →