TI-2023-24731 CVE-2023-46078 · GHSA-8wgv-6377-h5p6
Cross-site request forgery in PluginEver WC Serial Numbers
Priority LOW 38
Cross-Site Request Forgery (CSRF) vulnerability in PluginEver WC Serial Numbers plugin <= 1.6.3 versions.
PluginEver
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
PluginEver records in CISA KEVNo PluginEver vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2025-26106 CVE-2025-39364 · GHSA-9p4p-6vvc-6mcp
WordPress Product Category Slider for WooCommerce plugin <= 4.3.4 - Local File Inclusion vulnerability
Priority LOW 36
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in PluginEver Product Category Slider for WooCommerce woo-category-slider-by-pluginever allows PHP Loc…
TI-2026-83511 CVE-2026-111070 · GHSA-2r7v-fqcv-v2p7
Stored cross-site scripting in Content Pilot WordPress plugin
Priority LOW 24
The Content Pilot – Autoblogging & Affiliate Marketing Suite plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.2.4.
TI-2025-39706 CVE-2025-64263 · GHSA-54g8-cf5m-qwg3
WordPress WP Content Pilot plugin <= 2.1.7 - Broken Access Control vulnerability
Priority LOW 24
Missing Authorization vulnerability in PluginEver WP Content Pilot wp-content-pilot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Content Pilot: from n/a through <= 2.1.7.
TI-2023-24101 CVE-2023-45053 · GHSA-62rh-q3wq-2pxp
WordPress WP Content Pilot plugin <= 1.3.3 - HTML Injection vulnerability
Priority LOW 20
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in pluginever WP Content Pilot – Autoblogging & Affiliate Marketing Plugin allows Code Injection.This issue affects WP Content P…