Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: bmarshall511 Clear all filters
TI-2026-63849 CVE-2026-96752 · GHSA-w7ph-m5xc-pc82

Cross-site scripting in bmarshall511 Zero Spam for WordPress

Priority LOW 37

The Zero Spam for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Nested POST Array Keys via Contact Form 7 Integration in all versions up to, and including, 5.7.10 due to insufficient inp…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00241 Published 2026-09-25 No fix listed CWE-79
TI-2025-07614 CVE-2025-8318 · GHSA-mmwg-v3q6-976r

Jobify <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via keyword Parameter

Priority LOW 28

The Jobify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘keyword’ parameter in all versions up to, and including, 1.4.4 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00237 Published 2025-09-11 No fix listed CWE-79