Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: cmoreira Clear all filters
TI-2025-31293 CVE-2025-49245 · GHSA-j7v8-3hmq-6w5j

WordPress Testimonials Showcase plugin <= 1.9.16 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cmoreira Testimonials Showcase testimonials-showcase allows Reflected XSS.This issue affects Testimonials Showcase: fr…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0026 Published 2025-07-04 No fix listed CWE-79
TI-2025-31295 CVE-2025-49247 · GHSA-wm5g-6r8c-x9rp

WordPress Team Showcase plugin < 25.05.13 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cmoreira Team Showcase team-showcase-cm allows DOM-Based XSS.This issue affects Team Showcase: from n/a through < 25.0…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0026 Published 2025-07-04 No fix listed CWE-79
TI-2025-31296 CVE-2025-49248 · GHSA-j8x8-h75r-56qj

WordPress Team Showcase plugin < 25.05.13 - Broken Access Control Vulnerability

Priority LOW 20

Missing Authorization vulnerability in cmoreira Team Showcase team-showcase-cm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team Showcase: from n/a through < 25.05.13.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00295 Published 2025-06-06 No fix listed CWE-862
TI-2025-31294 CVE-2025-49246 · GHSA-j7g5-hmrm-fq9h

WordPress Testimonials Showcase plugin <= 1.9.16 - Broken Access Control Vulnerability

Priority LOW 20

Missing Authorization vulnerability in cmoreira Testimonials Showcase testimonials-showcase allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Testimonials Showcase: from n/a throu…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00295 Published 2025-06-06 No fix listed CWE-862
TI-2024-03435 CVE-2024-3681 · GHSA-3675-9rg3-9f6q

Interactive World Maps <= 2.4.14 - Reflected Cross-Site Scripting

Priority LOW 28

The Interactive World Maps plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search (s) parameter in all versions up to, and including, 2.4.14 due to insufficient input sanitization and output…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00504 Published 2024-05-02 No fix listed CWE-79