Read the docs

shahinurislam

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

shahinurislam records in CISA KEV

No shahinurislam vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2026-05499 CVE-2026-6271 · GHSA-7fx9-263h-9gmp

Career Section <= 1.7 - Unauthenticated Arbitrary File Upload

Priority MEDIUM 50

The Career Section plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.7 via the CV upload handler.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00665 Published 2026-05-14 No fix listed CWE-434
TI-2026-01017 CVE-2026-1302 · GHSA-gpmj-jv3p-qfg2

Meta-box GalleryMeta <= 3.0.1 - Authenticated (Editor+) Stored Cross-Site Scripting via Image Caption

Priority LOW 20

The Meta-box GalleryMeta plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00243 Published 2026-01-24 No fix listed CWE-79
TI-2026-00479 CVE-2026-0687 · GHSA-9jx6-rr99-97pv

Meta-box GalleryMeta <= 3.0.1 - Missing Authorization to Authenticated (Author+) Gallery Management

Priority LOW 19

The Meta-box GalleryMeta plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'mb_gallery' custom post type in all versions up to, and including, 3.0.1.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00225 Published 2026-01-24 No fix listed CWE-862
Open these records in search →