Vulnerabilities

TI-2026-65973 CVE-2026-95817 · GHSA-3hqm-f925-jf2f

DoFollow Case by Case <= 3.6.0 - Unauthenticated Stored Cross-Site Scripting via Comment Content

LOW 31

The DoFollow Case by Case plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 3.6.0 due to insufficient input sanitization and output escaping.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00236 Published 2026-10-02 No fix listed CWE-79

TI-2025-38425 CVE-2025-62102 · GHSA-rfp4-h3mc-c4hv

WordPress DoFollow Case by Case plugin <= 3.5.1 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in apasionados DoFollow Case by Case dofollow-case-by-case allows Cross Site Request Forgery.This issue affects DoFollow Case by Case: from n/a through <= 3.5.1.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00131 Published 2025-12-09 No fix listed CWE-352

TI-2025-30123 CVE-2025-47626 · GHSA-5xrr-4hfr-g6wh

WordPress Submission DOM tracking for Contact Form 7 plugin <= 2.1 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in apasionados Submission DOM tracking for Contact Form 7 cf7-submission-dom-tracking allows Stored XSS.This issue affect…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00282 Published 2025-05-07 No fix listed CWE-79

TI-2025-30122 CVE-2025-47625 · GHSA-c5ch-hjcg-5vxx

WordPress DoFollow Case by Case plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in apasionados DoFollow Case by Case dofollow-case-by-case allows Stored XSS.This issue affects DoFollow Case by Case: fr…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00282 Published 2025-05-07 No fix listed CWE-79

TI-2025-30121 CVE-2025-47624 · GHSA-v4c8-fph7-qhxg

WordPress DoFollow Case by Case plugin <= 3.5.1 - Cross Site Request Forgery (CSRF) vulnerability

LOW 37

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00191 Published 2025-05-07 No fix listed CWE-352

TI-2025-30119 CVE-2025-47622 · GHSA-37mw-ccj4-5q2g

WordPress Email Notification on Login plugin <= 1.7.0 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in apasionados Email Notification on Login email-notification-on-login allows Stored XSS.This issue affects Email Notific…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.0028 Published 2025-05-07 No fix listed CWE-79

TI-2023-23687 CVE-2023-44147 · GHSA-3hqm-9m87-w2r2

WordPress Comment Blacklist Updater plugin <= 1.1.0 - Broken Access Control vulnerability

LOW 25

Missing Authorization vulnerability in apasionados Comment Blacklist Updater comment-blacklist-updater allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Comment Blacklist Updater:…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00498 Published 2024-12-13 No fix listed CWE-862

TI-2023-26856 CVE-2023-49197 · GHSA-q8x8-6c79-7jxf

WordPress DoFollow Case by Case Plugin <= 3.4.2 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Apasionados, Apasionados del Marketing, NetConsulting DoFollow Case by Case.This issue affects DoFollow Case by Case: from n/a through 3.4.2.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00271 Published 2023-12-15 No fix listed CWE-352

TI-2022-17775 CVE-2022-38061 · GHSA-whxv-p57p-v97w

WordPress Export Post Info plugin <= 1.2.0 - Authenticated CSV Injection vulnerability

LOW 29

Authenticated (author+) CSV Injection vulnerability in Export Post Info plugin <= 1.2.0 at WordPress.

CVSS 3.1MEDIUM 6.2 Network High privileges User interaction EPSS 0.0076 Published 2022-09-23 No fix listed CWE-1236

TI-2022-17782 CVE-2022-38068 · GHSA-c3j7-gmm4-7682

WordPress Export Post Info plugin <= 1.1.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

LOW 23

Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Apasionados Export Post Info plugin <= 1.1.0 at WordPress.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00562 Published 2022-09-09 No fix listed CWE-79

TI-2021-13196 CVE-2021-33851 · GHSA-wwvr-r64c-3ghh

Cross-site scripting in WordPress Customize Login Image Plugin

LOW 27

A cross-site scripting (XSS) attack can cause arbitrary code (JavaScript) to run in a user's browser and can use an application as the vehicle for the attack.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01318 Published 2022-03-09 No fix listed CWE-79

Vulnerabilities

Filters