TI-2026-47308 CVE-2026-66637 · GHSA-6qf7-92v6-pjj8
WordPress Featured Video Plus plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability
Priority LOW 28
Contributor Cross Site Scripting (XSS) in Featured Video Plus <= 2.3.3 versions.
Vulnerabilities
8 records
TI-2026-47353 CVE-2026-66685 · GHSA-qxp8-27xq-3fvx
WordPress Featured Video Plus plugin <= 2.3.3 - Sensitive Data Exposure vulnerability
Priority LOW 30
Unauthenticated Sensitive Data Exposure in Featured Video Plus <= 2.3.3 versions.
TI-2025-35863 CVE-2025-58011 · GHSA-223j-w649-gh98
WordPress Content Mask plugin <= 1.8.5.2 - Server Side Request Forgery (SSRF) vulnerability
Priority LOW 28
Server-Side Request Forgery (SSRF) vulnerability in Alex Content Mask content-mask allows Server Side Request Forgery.This issue affects Content Mask: from n/a through <= 1.8.5.2.
TI-2025-35864 CVE-2025-58012 · GHSA-pww7-g5g9-2865
WordPress Content Mask plugin <= 1.8.5.3 - Insecure Direct Object References (IDOR) vulnerability
Priority LOW 18
Authorization Bypass Through User-Controlled Key vulnerability in Alex Content Mask content-mask allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Content Mask: from n/a through <…
TI-2024-31922 CVE-2024-47643 · GHSA-p9vh-w97h-xr2c
WordPress Include Fussball.de Widgets plugin <= 4.0.0 - Cross Site Scripting (XSS) vulnerability
Priority LOW 28
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alex Include Fussball.de Widgets include-fussball-de-widgets allows Stored XSS.This issue affects Include Fussball.de…
TI-2006-05271 CVE-2006-5459 · GHSA-qmc5-93wf-hh65
Multiple PHP remote file inclusion vulnerabilities in Download-Engine 1.4.2 and earlier…
Priority LOW 35
Multiple PHP remote file inclusion vulnerabilities in Download-Engine 1.4.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) $_ENGINE[eng_dir] and possibly (2) spaw_root parameters in…
TI-2006-05104 CVE-2006-5291 · GHSA-cg2v-qgrr-gw86
PHP remote file inclusion vulnerability in admin/includes/spaw/spaw_control.class.php in…
Priority MEDIUM 40
PHP remote file inclusion vulnerability in admin/includes/spaw/spaw_control.class.php in Download-Engine 1.4.2 allows remote attackers to execute arbitrary PHP code via a URL in the spaw_root parameter.
TI-2006-02787 CVE-2006-2879 · GHSA-g27x-xj6q-h3q3
SQL injection vulnerability in newscomments.php in Alex News-Engine 1.5.0 and earlier…
Priority LOW 36
SQL injection vulnerability in newscomments.php in Alex News-Engine 1.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the newsid parameter.