Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Arevico Clear all filters
TI-2026-02890 CVE-2026-3347 · GHSA-gv9p-wq55-477w

Multi Functional Flexi Lightbox <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting via 'message' Parameter

Priority LOW 25

The Multi Functional Flexi Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `arv_lb[message]` parameter in all versions up to, and including, 1.2 due to insufficient input sanitization a…

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00276 Published 2026-03-21 No fix listed CWE-79
TI-2025-42343 CVE-2025-68884 · GHSA-rmjp-62mc-qxg4

WordPress WP Simple Redirect plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arevico WP Simple Redirect wp-simple-redirect allows Reflected XSS.This issue affects WP Simple Redirect: from n/a thr…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00213 Published 2026-01-22 No fix listed CWE-79
TI-2025-36565 CVE-2025-58921 · GHSA-xvr6-486p-g4pg

WordPress WP Tactical Popup plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arevico WP Tactical Popup wp-tactical-popup allows Reflected XSS.This issue affects WP Tactical Popup: from n/a throug…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0025 Published 2025-10-22 No fix listed CWE-79