Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Mynamedia Component: Spiritual Gifts Survey (and Optional S.h.a.p.e Survey) Clear all filters
TI-2025-00582 CVE-2025-0688 · GHSA-q4w4-v939-f8rm

Spiritual Gifts Survey <= 0.9.10 - Unauthenticated CSRF to XSS

Priority MEDIUM 60

The Spiritual Gifts Survey (and optional S.H.A.P.E survey) WordPress plugin through 0.9.10 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00172 Published 2025-05-15 No fix listed CWE-79
TI-2025-00581 CVE-2025-0687 · GHSA-7fvh-65xr-g9fx

Spiritual Gifts Survey <= 0.9.10 - Unauthenticated CSRF to XSS

Priority MEDIUM 60

The Spiritual Gifts Survey (and optional S.H.A.P.E survey) WordPress plugin through 0.9.10 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00172 Published 2025-05-15 No fix listed CWE-79