Read the docs

SilkyPress

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

SilkyPress records in CISA KEV

No SilkyPress vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Image Zoom 1 record LOW Simple Custom Css And Js 1 record LOW Wp Image Zoom 1 record LOW

Records

4 records

TI-2017-01567 CVE-2017-2285 · GHSA-ccv8-jvrf-2cp3

Cross-site scripting in SilkyPress Simple Custom CSS and JS

Priority LOW 30

Cross-site scripting vulnerability in Simple Custom CSS and JS prior to version 3.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01466 Published 2017-08-02 No fix listed CWE-79
TI-2025-41296 CVE-2025-67542 · GHSA-93x9-7c94-7879

WordPress Multi-Step Checkout for WooCommerce plugin <= 2.33 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SilkyPress Multi-Step Checkout for WooCommerce wp-multi-step-checkout allows DOM-Based XSS.This issue affects Multi-St…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00196 Published 2025-12-09 No fix listed CWE-79
TI-2021-06737 CVE-2021-24447 · GHSA-vj2g-57f8-3334

WP Image Zoom < 1.47 - Local File Inclusion

Priority LOW 27

The WP Image Zoom WordPress plugin before 1.47 did not validate its tab parameter before using it in the include_once() function, leading to a local file inclusion issue in the admin dashboard

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01375 Published 2021-07-19 Fixed in 1.47 CWE-22
Open these records in search →