Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: cybio Clear all filters
TI-2025-20912 CVE-2025-28969 · GHSA-ph72-xjpc-54x2

WordPress Gallery Widget plugin <= 1.2.1 - SQL Injection Vulnerability

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in cybio Gallery Widget gallery-widget allows SQL Injection.This issue affects Gallery Widget: from n/a through <= 1.2.1.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00302 Published 2025-07-04 No fix listed CWE-89
TI-2025-17668 CVE-2025-23901 · GHSA-jr23-j6v8-2xr6

WordPress GravatarLocalCache plugin <= 1.1.2 - CSRF to Stored XSS vulnerability

Priority LOW 31

Cross-Site Request Forgery (CSRF) vulnerability in cybio GravatarLocalCache gravatarlocalcache allows Cross Site Request Forgery.This issue affects GravatarLocalCache: from n/a through <= 1.1.2.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00211 Published 2025-01-16 No fix listed CWE-352
TI-2024-34806 CVE-2024-51902 · GHSA-r88f-6cwp-mh6c

WordPress TinyCode plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cybio TinyCode tinycode allows Stored XSS.This issue affects TinyCode: from n/a through <= 1.2.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00328 Published 2024-11-19 No fix listed CWE-79