Vulnerabilities

TI-2025-16655 CVE-2025-22774 · GHSA-vp5j-wh2p-73xx

WordPress CRUDLab Scroll to Top Plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRUDLab CRUDLab Scroll to Top crudlab-scroll-to-top allows Reflected XSS.This issue affects CRUDLab Scroll to Top: fro…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00293 Published 2025-04-17 No fix listed CWE-79

TI-2025-17581 CVE-2025-23814 · GHSA-cppc-vw44-3c23

WordPress CRUDLab Like Box Plugin <= 2.0.9 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRUDLab CRUDLab Like Box crudlab-facebook-like-box allows Reflected XSS.This issue affects CRUDLab Like Box: from n/a…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00393 Published 2025-03-03 No fix listed CWE-79

TI-2025-17705 CVE-2025-23938 · GHSA-j648-x338-vqvm

WordPress Image Gallery Box by CRUDLab Plugin <= 1.0.3 - Local File Inclusion vulnerability

LOW 34

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CRUDLab Image Gallery Box by CRUDLab image-gallery-box-by-crudlab allows PHP Local File Inclusion.T…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00853 Published 2025-01-22 No fix listed CWE-98

TI-2024-36485 CVE-2024-54399 · GHSA-qrwq-c8cf-p4wv

WordPress CRUDLab Google Plus Button plugin <= 1.0.2 - CSRF to Stored XSS vulnerability

LOW 31

Cross-Site Request Forgery (CSRF) vulnerability in CRUDLab CRUDLab Google Plus Button crudlab-google-plus allows Stored XSS.This issue affects CRUDLab Google Plus Button: from n/a through <= 1.0.2.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00202 Published 2024-12-16 No fix listed CWE-352

TI-2023-25928 CVE-2023-47820 · GHSA-x667-jr9q-j93j

WordPress WP Like Button plugin <= 1.7.0 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in CRUDLab WP Like Button allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Like Button: from n/a through 1.7.0.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00337 Published 2024-12-09 No fix listed CWE-862

TI-2023-16154 CVE-2023-32966 · GHSA-wfqw-8765-478x

WordPress Jazz Popups Plugin <= 1.8.7 is vulnerable to Cross Site Request Forgery (CSRF) leading to Stored XSS

LOW 27

Cross-Site Request Forgery (CSRF) vulnerability in CRUDLab Jazz Popups leads to Stored XSS.This issue affects Jazz Popups: from n/a through 1.8.7.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00229 Published 2023-11-07 No fix listed CWE-352

TI-2023-21069 CVE-2023-40199 · GHSA-p692-r287-qx5x

WordPress WP Like Button Plugin <= 1.7.0 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in CRUDLab WP Like Button plugin <= 1.7.0 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00252 Published 2023-10-03 No fix listed CWE-352

TI-2023-16153 CVE-2023-32965 · GHSA-4ph4-7xqm-67v8

WordPress Jazz Popups Plugin <= 1.8.7 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in CRUDLab Jazz Popups plugin <= 1.8.7 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-07-18 No fix listed CWE-79

TI-2019-10025 CVE-2019-13344 · GHSA-xv32-4rjr-hg8q

An authentication bypass vulnerability in the CRUDLab WP Like Button plugin through 1.6.0…

MEDIUM 53

An authentication bypass vulnerability in the CRUDLab WP Like Button plugin through 1.6.0 for WordPress allows unauthenticated attackers to change settings.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.45095 Published 2019-07-05 No fix listed CWE-306

Vulnerabilities

Filters