Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: August Infotech Clear all filters
TI-2025-10774 CVE-2025-11753 · GHSA-xr5c-327f-pm5q

Multi-language Responsive Portfolio WordPress <= 1.0 - Authenticated (Admin+) Stored Cross-Site Scripting

Priority LOW 20

The Bootstrap Multi-language Responsive Portfolio plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0 due to insufficient input sanitization and…

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00233 Published 2025-11-04 No fix listed CWE-79
TI-2025-20943 CVE-2025-29000 · GHSA-7fj7-r7pv-xhrq

WordPress Multi-language Responsive Contact Form plugin <= 2.8 - Broken Access Control Vulnerability

Priority LOW 39

Missing Authorization vulnerability in August Infotech Multi-language Responsive Contact Form responsive-contact-form allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Multi-language Resp…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00428 Published 2025-07-16 No fix listed CWE-862
TI-2025-17552 CVE-2025-23785 · GHSA-wgjm-qvwq-jvmw

WordPress AI Responsive Gallery Album plugin <= 1.4 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in August Infotech AI Responsive Gallery Album ai-responsive-gallery-album allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Responsive Gall…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00414 Published 2025-01-16 No fix listed CWE-862
TI-2024-35138 CVE-2024-52467 · GHSA-7g6j-wq7c-h9w7

WordPress AI Responsive Gallery Album plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in August Infotech AI Responsive Gallery Album ai-responsive-gallery-album allows Reflected XSS.This issue affects AI Res…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00334 Published 2024-12-02 No fix listed CWE-79
TI-2024-20490 CVE-2024-31101 · GHSA-6g8j-4p6m-rxvq

WordPress AI Twitter Feeds (Twitter widget & shortcode) plugin <= 2.4 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in August Infotech AI Twitter Feeds (Twitter widget & shortcode) allows Stored XSS.This issue affects AI Twitter Feeds (T…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0032 Published 2024-03-31 No fix listed CWE-79
TI-2023-27739 CVE-2023-50834 · GHSA-9v2j-chw4-v7q3

WordPress WooCommerce Menu Extension Plugin <= 1.6.2 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in August Infotech WooCommerce Menu Extension allows Stored XSS.This issue affects WooCommerce Menu Extension: from n/a t…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00303 Published 2023-12-21 No fix listed CWE-79