qzzr

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

qzzr records in CISA KEV

No qzzr vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-11613 CVE-2025-12661 · GHSA-mwrx-vgvq-9cf4

Pollcaster Shortcode Plugin <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

LOW 28

The Pollcaster Shortcode Plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'height' parameter in the 'pollcaster' shortcode in all versions up to, and including, 1.0.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00238 Published 2025-11-21 No fix listed CWE-79

TI-2025-10823 CVE-2025-11806 · GHSA-xvmm-73h6-8xgf

Qzzr Shortcode Plugin <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

LOW 28

The Qzzr Shortcode Plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'qzzr' shortcode in all versions up to, and including, 1.0.1.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00231 Published 2025-10-31 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0