Vulnerabilities

TI-2025-38936 CVE-2025-62747 · GHSA-vrpp-pjx7-fp3p

WordPress Featured Image Generator plugin <= 1.3.4 - Broken Access Control vulnerability

LOW 29

Missing Authorization vulnerability in Aum Watcharapon Featured Image Generator featured-image-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Featured Image Generator…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00209 Published 2025-12-31 No fix listed CWE-862

TI-2025-35880 CVE-2025-58028 · GHSA-4cmv-jcpg-q655

WordPress Designil PDPA Thailand plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aum Watcharapon Designil PDPA Thailand pdpa-thailand allows Stored XSS.This issue affects Designil PDPA Thailand: from…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00209 Published 2025-09-22 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Featured Image Generator plugin <= 1.3.4 - Broken Access Control vulnerability

WordPress Designil PDPA Thailand plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability