Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: aerin Clear all filters
TI-2026-04999 CVE-2026-5694 · GHSA-rqwq-3pw2-jcpx

Quick Interest Slider <= 3.1.5 - Unauthenticated Stored Cross-Site Scripting

Priority LOW 37

The Quick Interest Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'loan-amount' and 'loan-period' parameters in all versions up to, and including, 3.1.5 due to insufficient input sanitiz…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00312 Published 2026-04-15 No fix listed CWE-79
TI-2024-11875 CVE-2024-12814 · GHSA-63pf-rx8v-wjx4

Loan Comparison <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 29

The Loan Comparison plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'loancomparison' shortcode in all versions up to, and including, 2.0 due to insufficient input sanitization and outpu…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00435 Published 2024-12-24 No fix listed CWE-79