Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Vendor: eleopard Clear all filters
TI-2025-36740 CVE-2025-59135 · GHSA-23pm-f242-hqh2

WordPress Behance Portfolio Manager plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eleopard Behance Portfolio Manager portfolio-manager-powered-by-behance allows Stored XSS.This issue affects Behance P…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.0017 Published 2025-12-31 No fix listed CWE-79
TI-2025-36742 CVE-2025-59137 · GHSA-v43f-9m3r-qj67

WordPress Behance Portfolio Manager plugin <= 1.7.5 - Cross Site Request Forgery (CSRF) vulnerability

Priority LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in eleopard Behance Portfolio Manager portfolio-manager-powered-by-behance allows Stored XSS.This issue affects Behance Portfolio Manager: from n/a through <= 1.7.5.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00115 Published 2025-12-31 No fix listed CWE-352
TI-2025-35766 CVE-2025-57913 · GHSA-9gxf-29px-37qr

WordPress Behance Portfolio Manager plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eleopard Behance Portfolio Manager portfolio-manager-powered-by-behance allows Stored XSS.This issue affects Behance P…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00223 Published 2025-09-22 No fix listed CWE-79
TI-2025-20953 CVE-2025-29010 · GHSA-54qg-grqx-45xx

WordPress Behance Portfolio Manager plugin <= 1.7.5 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in eleopard Behance Portfolio Manager portfolio-manager-powered-by-behance allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Behance Portfolio…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00295 Published 2025-06-06 No fix listed CWE-862
TI-2025-23222 CVE-2025-32124 · GHSA-mpmp-h5fx-52p8

WordPress Behance Portfolio Manager plugin <= 1.7.5 - SQL Injection vulnerability

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in eleopard Behance Portfolio Manager portfolio-manager-powered-by-behance allows Blind SQL Injection.This issue affects…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00645 Published 2025-04-04 No fix listed CWE-89
TI-2025-22689 CVE-2025-31526 · GHSA-7v43-7xp7-5hx7

WordPress Behance Portfolio Manager plugin <= 1.7.5 - SQL Injection vulnerability

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in eleopard Behance Portfolio Manager portfolio-manager-powered-by-behance allows SQL Injection.This issue affects Behanc…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00337 Published 2025-03-31 No fix listed CWE-89