Read the docs

demonisblack

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

demonisblack records in CISA KEV

No demonisblack vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Demon Image Annotation 3 records MEDIUM

Records

4 records

TI-2023-21085 CVE-2023-40215 · GHSA-w8vv-fhxr-4vqg

WordPress Demon image annotation Plugin <= 5.1 is vulnerable to SQL Injection

Priority LOW 36

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Demonisblack demon image annotation allows SQL Injection.This issue affects demon image annotation: from n/a through 5…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00681 Published 2023-11-03 No fix listed CWE-89
TI-2026-03538 CVE-2026-4083 · GHSA-m758-98cp-w4h7

Cross-site scripting in demonisblack Scoreboard for HTML5 Games Lite

Priority LOW 28

The Scoreboard for HTML5 Games Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'scoreboard' shortcode in all versions up to, and including, 1.2.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00218 Published 2026-03-20 No fix listed CWE-79
Open these records in search →