Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ashish Ajani WP Simple HTML Sitemap wp-simple-html-sitemap allows DOM-Based XSS.This issue affects WP Simple HTML Site…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00179 Published 2026-04-08 No fix listed CWE-79
Priority LOW 30

The Contact Form vCard Generator plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'wp_gvccf_check_download_request' function in all versions up to, and including,…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00349 Published 2026-01-09 No fix listed CWE-862
Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ashish Ajani Contact Form vCard Generator contact-form-vcard-generator allows Reflected XSS.This issue affects Contact…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00293 Published 2025-04-17 No fix listed CWE-79
Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ashish Ajani Contact Form vCard Generator contact-form-vcard-generator allows Stored XSS.This issue affects Contact Fo…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00299 Published 2025-04-03 No fix listed CWE-79
Priority LOW 31

Missing Authorization vulnerability in Ashish Ajani WP Simple HTML Sitemap wp-simple-html-sitemap allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Simple HTML Sitemap: from n/…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0059 Published 2025-04-01 No fix listed CWE-862
Priority LOW 38

The WP Church Donation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several donation form submission parameters in all versions up to, and including, 1.7 due to insufficient input sanitization an…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00364 Published 2025-03-25 No fix listed CWE-79