Vulnerabilities

TI-2026-04191 CVE-2026-4806 · GHSA-jp8r-42gx-hfwh

Missing authorization in alexvtn Custom Thank You Page for WooCommerce

LOW 34

The Custom Thank You Page for WooCommerce plugin for WordPress is vulnerable to unauthorized access and loss of data due to a missing capability check on the save_option() function in all versions up to, and including, 1…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00174 Published 2026-09-24 No fix listed CWE-862

TI-2025-36016 CVE-2025-58211 · GHSA-v39c-9vgf-6gjh

WordPress Chatbox Manager Plugin <= 1.2.6 - Cross Site Scripting (XSS) Vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in alexvtn Chatbox Manager wa-chatbox-manager allows Stored XSS.This issue affects Chatbox Manager: from n/a through <= 1…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00169 Published 2025-08-27 No fix listed CWE-79

TI-2025-31799 CVE-2025-49884 · GHSA-c5gj-7mpv-cv5p

WordPress Internal Linking of Related Contents plugin <= 1.1.8 - Broken Access Control Vulnerability

LOW 29

Missing Authorization vulnerability in alexvtn Internal Linking of Related Contents internal-linking-of-related-contents allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Internal…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00293 Published 2025-07-16 No fix listed CWE-862

TI-2025-30537 CVE-2025-48167 · GHSA-p4hg-g7q8-w89x

WordPress Chatbox Manager plugin <= 1.2.5 - Broken Access Control Vulnerability

LOW 24

Missing Authorization vulnerability in alexvtn Chatbox Manager wa-chatbox-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Chatbox Manager: from n/a through <= 1.2.5.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00256 Published 2025-07-16 No fix listed CWE-862

TI-2025-22060 CVE-2025-30790 · GHSA-w89r-rwcf-75w7

WordPress Chatbox Manager plugin <= 1.2.2 - Broken Access Control Vulnerability

LOW 30

Missing Authorization vulnerability in alexvtn Chatbox Manager wa-chatbox-manager allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Chatbox Manager: from n/a through <= 1.2.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00467 Published 2025-03-27 No fix listed CWE-862

TI-2025-22039 CVE-2025-30769 · GHSA-p26f-fw78-p227

WordPress WIP WooCarousel Lite plugin <= 1.1.7 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

LOW 31

Cross-Site Request Forgery (CSRF) vulnerability in alexvtn WIP WooCarousel Lite wip-woocarousel-lite allows Stored XSS.This issue affects WIP WooCarousel Lite: from n/a through <= 1.1.7.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00193 Published 2025-03-27 No fix listed CWE-352

TI-2025-19675 CVE-2025-26759 · GHSA-m687-fv5p-8fpv

WordPress Content Snippet Manager plugin <= 1.1.5 - CSRF to Stored XSS vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in alexvtn Content Snippet Manager content-snippet-manager allows Stored XSS.This issue affects Content Snippet Manager: from n/a through <= 1.1.5.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00146 Published 2025-02-16 No fix listed CWE-352

TI-2024-10923 CVE-2024-11779 · GHSA-c56w-53m4-rfhw

WIP WooCarousel Lite <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

LOW 28

The WIP WooCarousel Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wip_woocarousel_products_carousel' shortcode in all versions up to, and including, 1.1.6 due to insufficient in…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00327 Published 2024-12-05 No fix listed CWE-79

TI-2024-10579 CVE-2024-11416 · GHSA-xmjc-5pgp-5pjx

WIP Incoming Lite <= 1.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting

LOW 27

The WIP Incoming Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.1.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00285 Published 2024-11-21 No fix listed CWE-352

TI-2024-10594 CVE-2024-11432 · GHSA-qwh9-3w37-r5hc

SuevaFree Essential Kit <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

LOW 31

The SuevaFree Essential Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'counter' shortcode in all versions up to, and including, 1.1.3 due to insufficient input sanitization and ou…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0123 Published 2024-11-21 No fix listed CWE-79

Vulnerabilities

Filters