TI-2026-82591 CVE-2026-118074 · GHSA-pv9h-hqgj-5hw6
PHP object injection in WordPress Finale Lite plugin
Priority LOW 33
Shop manager PHP Object Injection in Finale Lite <= 2.21.0 versions.
Vulnerabilities
5 records
TI-2025-30656 CVE-2025-48330 · GHSA-8wj3-h346-q9h6
WordPress Real Time Validation for Gravity Forms <= 1.7.0 - Local File Inclusion Vulnerability
Priority LOW 36
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Daman Jeet Real Time Validation for Gravity Forms real-time-validation-for-gravity-forms allows PHP…
TI-2025-32786 CVE-2025-52736 · GHSA-rgf5-wqhv-47jj
WordPress Finale Lite Plugin <= 2.20.0 - Cross Site Scripting (XSS) Vulnerability
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Daman Jeet Finale Lite finale-woocommerce-sales-countdown-timer-discount allows Reflected XSS.This issue affects Final…
TI-2025-30655 CVE-2025-48329 · GHSA-7g3m-7v3x-898x
WordPress Real Time Validation for Gravity Forms plugin <= 1.7.0 - Reflected Cross Site Scripting (XSS) vulnerability
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Daman Jeet Real Time Validation for Gravity Forms real-time-validation-for-gravity-forms allows Reflected XSS.This iss…
TI-2025-30654 CVE-2025-48328 · GHSA-grqc-hwrx-h7m2
Cross-site request forgery in Daman Jeet Real Time Validation for Gravity Forms
Priority LOW 19
Cross-Site Request Forgery (CSRF) vulnerability in Daman Jeet Real Time Validation for Gravity Forms real-time-validation-for-gravity-forms allows Cross Site Request Forgery.This issue affects Real Time Validation for Gr…