Vendors / tplugins Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now tplugins records in CISA KEV No tplugins vulnerabilities are listed in CISA KEV.
Priority LOW 28
Multiple plugins and/or themes for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled lightGallery library (<= 2.8.3) in various versions due to insufficient input sanitization and output es…
CVSS 3.1 MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00256 · Published 2025-11-20 · No fix listed CWE-79
Priority LOW 20
The TP Restore Categories And Taxonomies plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.1.
CVSS 3.1 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00245 · Published 2026-04-22 · No fix listed CWE-862
Open these records in search → All records by CVSS severity
Critical0 High0 Medium2 Low0 No CVSS0