Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: AppJetty Clear all filters
TI-2025-30104 CVE-2025-47607 · GHSA-vpxj-g3rg-xj45

WordPress Show All Comments plugin <= 7.0.1 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AppJetty Show All Comments show-all-comments-in-one-page allows Stored XSS.This issue affects Show All Comments: from…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.0028 Published 2025-05-07 No fix listed CWE-79
TI-2025-30102 CVE-2025-47605 · GHSA-gjcg-8q5f-6j48

WordPress WP jQuery DataTable plugin <= 4.1.0 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AppJetty WP jQuery DataTable wp-jquery-datatable allows Stored XSS.This issue affects WP jQuery DataTable: from n/a th…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.0028 Published 2025-05-07 No fix listed CWE-79
TI-2024-37256 CVE-2024-56287 · GHSA-4pgh-j6jq-5w7w

WordPress WP jQuery DataTable Plugin <= 4.0.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AppJetty WP jQuery DataTable wp-jquery-datatable allows Stored XSS.This issue affects WP jQuery DataTable: from n/a th…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00312 Published 2025-01-07 No fix listed CWE-79
TI-2023-13260 CVE-2023-28748 · GHSA-cx58-rgfc-jwq7

WordPress Copy Or Move Comments Plugin <= 5.0.4 is vulnerable to SQL Injection

Priority MEDIUM 50

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in biztechc Copy or Move Comments allows SQL Injection.This issue affects Copy or Move Comments: from n/a through 5.0.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00685 Published 2023-11-06 No fix listed CWE-89
TI-2022-03933 CVE-2022-4295 · GHSA-fm6q-qg6j-gh58

Show All Comments < 7.0.1 - Reflected XSS

Priority MEDIUM 60

The Show All Comments WordPress plugin before 7.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against a logged in high…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00906 Published 2023-01-16 Fixed in 7.0.1