Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Berg Informatik Clear all filters
TI-2024-12713 CVE-2024-13674 · GHSA-92h6-5j45-chhw

Cosmic Blocks (40+) Content Editor Blocks Collection <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 28

The Cosmic Blocks (40+) Content Editor Blocks Collection plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cwp_social_share' shortcode in all versions up to, and including, 1.3.0 due to…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0033 Published 2025-02-19 No fix listed CWE-79
TI-2024-35950 CVE-2024-53752 · GHSA-2chg-mq5v-5gqp

WordPress Stripe Donation plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Berg Informatik Stripe Donation bin-stripe-donation allows Stored XSS.This issue affects Stripe Donation: from n/a thr…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00239 Published 2024-12-01 No fix listed CWE-79