Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Rolf van Gelder Clear all filters
TI-2023-15790 CVE-2023-32508 · GHSA-65cf-gcc4-j6m9

WordPress Order Your Posts Manually Plugin <= 2.2.5 is vulnerable to SQL Injection

Priority MEDIUM 44

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Rolf van Gelder Order Your Posts Manually allows SQL Injection.This issue affects Order Your Posts Manually: from n/a…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00681 Published 2023-11-03 No fix listed CWE-89
TI-2022-02507 CVE-2022-2709 · GHSA-qq28-5ghx-778p

Float to Top Button <= 2.3.6 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The Float to Top Button WordPress plugin through 2.3.6 does not escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_ht…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00622 Published 2022-09-19 No fix listed CWE-79