Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: David Cramer Clear all filters
TI-2025-17320 CVE-2025-23553 · GHSA-7ww3-mjf8-v82h

WordPress Userbase Access Control plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Cramer Userbase Access Control userbase-access-control allows Reflected XSS.This issue affects Userbase Access C…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0037 Published 2025-03-03 No fix listed CWE-79
TI-2023-25134 CVE-2023-46632 · GHSA-v5jp-hvcv-p53f

WordPress My Shortcodes plugin <= 2.3 - Broken Access Control vulnerability

Priority LOW 32

Missing Authorization vulnerability in David Cramer My Shortcodes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My Shortcodes: from n/a through 2.3.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00487 Published 2025-01-02 No fix listed CWE-862
TI-2024-33163 CVE-2024-49677 · GHSA-73pp-xw42-wgj4

WordPress Bootstrap Buttons plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Cramer Bootstrap Buttons bootstrap-buttons allows Reflected XSS.This issue affects Bootstrap Buttons: from n/a t…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00333 Published 2024-12-18 No fix listed CWE-79