Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: bittokazi Clear all filters
TI-2025-09072 CVE-2025-9887 · GHSA-7hv7-86v4-mgxw

Custom Login And Signup Widget <= 1.0 - Cross-Site Request Forgery

Priority LOW 19

The Custom Login And Signup Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0014 Published 2025-09-20 No fix listed CWE-352
TI-2025-31145 CVE-2025-49029 · GHSA-4mv9-2h4p-3hrx

WordPress Custom Login And Signup Widget plugin <= 1.0 - Arbitrary Code Execution vulnerability

Priority MEDIUM 46

Improper Control of Generation of Code ('Code Injection') vulnerability in bitto.kazi Custom Login And Signup Widget custom-login-and-signup-widget allows Code Injection.This issue affects Custom Login And Signup Widget:…

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.02359 Published 2025-07-01 No fix listed CWE-94
TI-2025-02181 CVE-2025-2510 · GHSA-v8f4-5r7f-6q9r

Frndzk Expandable Bottom Bar <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via text Parameter

Priority LOW 24

The Frndzk Expandable Bottom Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'text' parameter in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping…

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00248 Published 2025-03-25 No fix listed CWE-79