Vulnerabilities

TI-2025-17208 CVE-2025-23441 · GHSA-4c75-259h-2625

WordPress Attach Gallery Posts plugin <= 1.6 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 33

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dkukral Attach Gallery Posts attach-gallery-posts allows Reflected XSS.This issue affects Attach Gallery Posts: from n…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00299 Published 2025-03-03 No fix listed CWE-79

TI-2025-17440 CVE-2025-23673 · GHSA-8hx5-2vmj-gpf3

WordPress Email on Publish plugin <= 1.5 - CSRF to Stored XSS vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in dkukral Email on Publish email-on-publish allows Stored XSS.This issue affects Email on Publish: from n/a through <= 1.5.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00182 Published 2025-01-16 No fix listed CWE-352

Vulnerabilities

Filters

WordPress Attach Gallery Posts plugin <= 1.6 - Reflected Cross Site Scripting (XSS) vulnerability

WordPress Email on Publish plugin <= 1.5 - CSRF to Stored XSS vulnerability