Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Vendor: themeisle Component: Visualizer Clear all filters
TI-2024-23605 CVE-2024-35736 · GHSA-7g6j-6rv7-wp8q

WordPress Visualizer plugin <= 3.11.1 - SQL Injection vulnerability

Priority LOW 38

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle Visualizer.This issue affects Visualizer: from n/a through 3.11.1.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00441 Published 2024-06-08 No fix listed CWE-89
TI-2022-02258 CVE-2022-2444 · GHSA-4rjr-p7j3-f64g

Visualizer: Tables and Charts Manager for WordPress <= 3.7.9 - Authenticated (Contributor+) PHAR Deserialization

Priority MEDIUM 44

The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to deserialization of untrusted input via the 'remote_data' parameter in versions up to, and including 3.7.9.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02268 Published 2022-07-18 No fix listed CWE-502
TI-2019-12630 CVE-2019-16931 · GHSA-89c3-rfvp-jjmq

A stored XSS vulnerability in the Visualizer plugin 3.3.0 for WordPress allows an…

Priority LOW 33

A stored XSS vulnerability in the Visualizer plugin 3.3.0 for WordPress allows an unauthenticated attacker to execute arbitrary JavaScript when an admin or other privileged user edits the chart via the admin dashboard.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.03342 Published 2019-10-03 No fix listed CWE-79