Vulnerabilities

TI-2025-38938 CVE-2025-62749 · GHSA-49mv-gc6x-96j3

WordPress User Specific Content plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bainternet User Specific Content user-specific-content allows DOM-Based XSS.This issue affects User Specific Content:…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00193 Published 2025-12-31 No fix listed CWE-79

TI-2023-25549 CVE-2023-47231 · GHSA-qwmr-4wg7-xq78

WordPress ShortCodes UI Plugin <= 1.9.8 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Bainternet ShortCodes UI plugin <= 1.9.8 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00385 Published 2023-11-08 No fix listed CWE-79

TI-2023-24055 CVE-2023-44994 · GHSA-qc2j-v2xc-49h5

WordPress ShortCodes UI Plugin <= 1.9.8 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Bainternet ShortCodes UI plugin <= 1.9.8 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00259 Published 2023-10-10 No fix listed CWE-352

Vulnerabilities

Filters

WordPress User Specific Content plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability

WordPress ShortCodes UI Plugin <= 1.9.8 is vulnerable to Cross Site Scripting (XSS)

WordPress ShortCodes UI Plugin <= 1.9.8 is vulnerable to Cross Site Request Forgery (CSRF)