Read the docs

teastudio.pl

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

teastudio.pl records in CISA KEV

No teastudio.pl vulnerabilities are listed in CISA KEV.

Records

5 records

TI-2025-26100 CVE-2025-39358 · GHSA-j2p9-99mh-4f77

WordPress WP Posts Carousel <= 1.3.12 - PHP Object Injection Vulnerability

Priority MEDIUM 40

Deserialization of Untrusted Data vulnerability in teastudio.pl WP Posts Carousel wp-posts-carousel allows Object Injection.This issue affects WP Posts Carousel: from n/a through <= 1.3.12.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00467 Published 2025-06-06 No fix listed CWE-502
TI-2025-26315 CVE-2025-39573 · GHSA-v3c9-cxr8-9vgg

WordPress WP Posts Carousel plugin <= 1.3.10 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in teastudio.pl WP Posts Carousel wp-posts-carousel allows Stored XSS.This issue affects WP Posts Carousel: from n/a thro…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00324 Published 2025-04-16 No fix listed CWE-79
TI-2025-22190 CVE-2025-30920 · GHSA-hmgv-7gr3-j5q3

WordPress WP Posts Carousel plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in teastudio.pl WP Posts Carousel wp-posts-carousel allows Stored XSS.This issue affects WP Posts Carousel: from n/a thro…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00298 Published 2025-03-27 No fix listed CWE-79
TI-2025-22364 CVE-2025-31094 · GHSA-47pj-m3vr-845x

WordPress WP Posts Carousel plugin <= 1.3.8 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in teastudio.pl WP Posts Carousel wp-posts-carousel allows Stored XSS.This issue affects WP Posts Carousel: from n/a thro…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00214 Published 2025-03-28 No fix listed CWE-79
TI-2025-01281 CVE-2025-1491 · GHSA-g8mx-p6cm-prmq

WP Posts Carousel <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via auto_play_timeout Parameter

Priority LOW 28

The WP Posts Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘auto_play_timeout’ parameter in all versions up to, and including, 1.3.7 due to insufficient input sanitization and output…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00294 Published 2025-03-01 No fix listed CWE-79
Open these records in search →