Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: Molongui Clear all filters
TI-2026-70225 CVE-2026-101920 · GHSA-m398-mh86-wgcp

Molongui Authorship Stored DOM-Based XSS via Comment href Attribute

Priority LOW 31

The Molongui Authorship – Author Boxes, Guest Authors & Co-Authors for WordPress plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'comment (href attribute inside comment content)' param…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00297 Published 2026-10-10 No fix listed CWE-79
TI-2023-27780 CVE-2023-50876 · GHSA-c6mp-vwvj-g8hr

WordPress Molongui plugin <= 4.7.3 - Broken Access Control vulnerability

Priority LOW 21

Missing Authorization vulnerability in Molongui Molongui allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Molongui: from n/a through 4.7.3.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00486 Published 2024-12-09 No fix listed CWE-862
TI-2024-19540 CVE-2024-29764 · GHSA-px3f-rf4f-7vxx

WordPress Molongui plugin <= 4.7.7 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Molongui allows Stored XSS.This issue affects Molongui: from n/a through 4.7.7.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0036 Published 2024-03-27 No fix listed CWE-79
TI-2023-06411 CVE-2023-7014 · GHSA-45x9-627r-26hh

Author Box, Guest Author and Co-Authors for Your Posts – Molongui <= 4.7.4 - Information Exposure via ma_debug

Priority MEDIUM 40

The Author Box, Guest Author and Co-Authors for Your Posts – Molongui plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.7.4 via the 'ma_debu' parameter.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0065 Published 2024-02-05 No fix listed CWE-359
TI-2023-20820 CVE-2023-39921 · GHSA-43p5-xqqc-4x3g

WordPress Molongui Plugin <= 4.6.19 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Molongui Author Box, Guest Author and Co-Authors for Your Posts – Molongui allows Stored XSS.This issue affects Author…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00386 Published 2023-11-30 No fix listed CWE-79