Read the docs

Aleksandar Urošević

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Aleksandar Urošević records in CISA KEV

No Aleksandar Urošević vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Stock Ticker 4 records MEDIUM My Youtube Channel 1 record LOW

Records

7 records

TI-2022-22331 CVE-2022-45365 · GHSA-2ff7-p4h3-cfp8

WordPress Stock Ticker Plugin <= 3.23.2 is vulnerable to Cross Site Scripting (XSS)

Priority MEDIUM 62

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aleksandar Urošević Stock Ticker allows Reflected XSS.This issue affects Stock Ticker: from n/a through 3.23.2.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.49172 Published 2023-12-14 No fix listed CWE-79
TI-2023-12336 CVE-2023-27626 · GHSA-43f2-7v5v-7h6m

WordPress Stock Ticker plugin <= 3.23.0 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in Aleksandar Urošević Stock Ticker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stock Ticker: from n/a through 3.23.0.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00398 Published 2024-12-09 No fix listed CWE-862
TI-2025-18438 CVE-2025-24721 · GHSA-fhgg-6h6w-vm63

WordPress Easy YouTube Gallery plugin <= 1.0.4 - Stored Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aleksandar Urošević Easy YouTube Gallery easy-youtube-gallery allows Stored XSS.This issue affects Easy YouTube Galler…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00311 Published 2025-01-24 No fix listed CWE-79
TI-2023-28193 CVE-2023-51541 · GHSA-8987-77qq-2wwv

WordPress Stock Ticker Plugin <= 3.23.4 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aleksandar Urošević Stock Ticker allows Stored XSS.This issue affects Stock Ticker: from n/a through 3.23.4.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00328 Published 2023-12-29 No fix listed CWE-79
TI-2024-05905 CVE-2024-6363 · GHSA-rp9c-j467-r9xv

Stock Ticker <= 3.24.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via stock_ticker Shortcode

Priority LOW 28

The Stock Ticker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's stock_ticker shortcode in all versions up to, and including, 3.24.4 due to insufficient input sanitization and output es…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00322 Published 2024-06-29 No fix listed CWE-79
Open these records in search →