Read the docs

richardgabriel

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

richardgabriel records in CISA KEV

No richardgabriel vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-18834 CVE-2025-25165 · GHSA-pfrf-6qh2-mph6

WordPress Staff Directory Plugin: Company Directory Plugin <= 4.3 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in richardgabriel Staff Directory Plugin: Company Directory staff-directory-pro allows Stored XSS.This issue affects Staf…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00393 Published 2025-03-03 No fix listed CWE-79
TI-2024-12862 CVE-2024-13839 · GHSA-mw46-fwpr-325h

Company Directory <= 4.3 - Reflected Cross-Site Scripting via add_query_arg Function

Priority LOW 27

The Staff Directory Plugin: Company Directory plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and includ…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00349 Published 2025-03-05 No fix listed CWE-79
Open these records in search →