Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Dang Ngoc Binh Clear all filters
TI-2025-19480 CVE-2025-26542 · GHSA-gr92-mxmc-wrw8

WordPress Zalo Live Chat Plugin <= 1.1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dang Ngoc Binh Zalo Live Chat zalo-live-chat allows Reflected XSS.This issue affects Zalo Live Chat: from n/a through…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0037 Published 2025-03-26 No fix listed CWE-79
TI-2024-34696 CVE-2024-51792 · GHSA-67c8-xphv-qf8f

WordPress Audio Record plugin <= 1.0 - Arbitrary File Upload vulnerability

Priority MEDIUM 50

Unrestricted Upload of File with Dangerous Type vulnerability in Dang Ngoc Binh Audio Record audio-record allows Upload a Web Shell to a Web Server.This issue affects Audio Record: from n/a through <= 1.0.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00576 Published 2024-11-11 No fix listed CWE-434