Vulnerabilities

TI-2025-22565 CVE-2025-31384 · GHSA-54m9-c6rr-42rm

WordPress Videos plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Aviplugins Videos allows Reflected XSS.This issue affects Videos: from n/a through 1.0.5.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00257 Published 2025-04-04 No fix listed CWE-80

TI-2023-05014 CVE-2023-5448 · GHSA-q4j6-9v4c-h9vq

WP Register Profile With Shortcode <= 3.5.9 - Cross-Site Request Forgery to User Password Reset

MEDIUM 40

The WP Register Profile With Shortcode plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.5.9.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00321 Published 2024-01-11 No fix listed CWE-352

TI-2023-09617 CVE-2023-23818 · GHSA-682v-v4hm-9r6v

WordPress WP Register Profile With Shortcode Plugin <= 3.5.7 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Aviplugins.Com WP Register Profile With Shortcode plugin <= 3.5.7 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-06-12 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Videos plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability

WP Register Profile With Shortcode <= 3.5.9 - Cross-Site Request Forgery to User Password Reset

WordPress WP Register Profile With Shortcode Plugin <= 3.5.7 is vulnerable to Cross Site Scripting (XSS)