Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: brainvireinfo Clear all filters
TI-2026-01496 CVE-2026-1820 · GHSA-36p3-m272-rwxj

Cross-site scripting in brainvireinfo Media Library Alt Text Editor

Priority LOW 28

The Media Library Alt Text Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bvmalt_sc_div_update_alt_text' shortcode in all versions up to, and including, 1.0.0 due to insufficie…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00181 Published 2026-03-07 No fix listed CWE-79
TI-2025-22993 CVE-2025-31856 · GHSA-5w8w-w4rf-vhcw

WordPress Export All Post Meta Plugin <= 1.2.1 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in brainvireinfo Export All Post Meta export-all-post-meta allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Export All Post Meta: from n/a through <=…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00326 Published 2025-04-01 No fix listed CWE-862
TI-2025-17283 CVE-2025-23516 · GHSA-vv57-g9wj-p22r

WordPress Sale with Razorpay plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 33

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brainvireinfo Sale with Razorpay sell-with-razorpay allows Reflected XSS.This issue affects Sale with Razorpay: from n…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00281 Published 2025-03-03 No fix listed CWE-79
TI-2025-17751 CVE-2025-23984 · GHSA-w64r-953q-gv3q

WordPress Dynamic URL SEO plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brainvireinfo Dynamic URL SEO dynamic-url-seo allows Reflected XSS.This issue affects Dynamic URL SEO: from n/a throug…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00324 Published 2025-02-03 No fix listed CWE-79
TI-2024-35141 CVE-2024-52470 · GHSA-5436-rp7w-v3hq

WordPress Dynamic URL SEO plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brainvireinfo Dynamic URL SEO dynamic-url-seo allows Reflected XSS.This issue affects Dynamic URL SEO: from n/a throug…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00287 Published 2024-11-20 No fix listed CWE-79