Read the docs

wpo-HR

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

wpo-HR records in CISA KEV

No wpo-HR vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ngg Smart Image Search 1 record LOW

Records

5 records

TI-2025-32882 CVE-2025-52832 · GHSA-vm95-2m88-cv87

WordPress NGG Smart Image Search plugin <= 3.4.1 - SQL Injection Vulnerability

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpo-HR NGG Smart Image Search ngg-smart-image-search allows SQL Injection.This issue affects NGG Smart Image Search: f…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00323 Published 2025-07-04 No fix listed CWE-89
TI-2025-30000 CVE-2025-47503 · GHSA-8cwm-c2r5-2hp9

WordPress NGG Smart Image Search plugin <= 3.3.3 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpo-HR NGG Smart Image Search ngg-smart-image-search allows Stored XSS.This issue affects NGG Smart Image Search: from…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00266 Published 2025-05-07 No fix listed CWE-79
TI-2025-35879 CVE-2025-58027 · GHSA-4j69-8q5j-4h2r

WordPress NGG Smart Image Search Plugin <= 3.4.3 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpo-HR NGG Smart Image Search ngg-smart-image-search allows Stored XSS.This issue affects NGG Smart Image Search: from…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00215 Published 2025-09-22 No fix listed CWE-79
TI-2024-12697 CVE-2024-13658 · GHSA-xvcx-v8p3-jwg2

NGG Smart Image Search <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 28

The NGG Smart Image Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'hr_SIS_nextgen_searchbox' shortcode in all versions up to, and including, 3.2.1 due to insufficient input san…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00299 Published 2025-02-12 No fix listed CWE-79
Open these records in search →