Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: Eli Clear all filters
TI-2026-41515 CVE-2026-57691 · GHSA-w832-4h9j-8h6c

WordPress Anti-Malware Security and Brute-Force Firewall plugin <= 4.23.89 - Cross Site Scripting (XSS) vulnerability

Priority LOW 25

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eli Anti-Malware Security and Brute-Force Firewall gotmls allows Reflected XSS.This issue affects Anti-Malware Securit…

CVSS 3.1MEDIUM 5.8 Network No auth User interaction EPSS 0.00201 Published 2026-07-13 No fix listed CWE-79
TI-2025-30011 CVE-2025-47514 · GHSA-qhm8-hv4h-3hgw

Cross-site request forgery in ELI's Related Posts Footer Links and Widget

Priority LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in Eli ELI's Related Posts Footer Links and Widget spostarbust allows Stored XSS.This issue affects ELI's Related Posts Footer Links and Widget: from n/a through <= 1.2.04.…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00152 Published 2025-05-07 No fix listed CWE-352
TI-2025-22058 CVE-2025-30788 · GHSA-7x3g-q3pp-h6vc

WordPress EZ SQL Reports Shortcode Widget and DB Backup plugin <= 5.25.08 - CSRF to SQL Injection vulnerability

Priority LOW 35

Cross-Site Request Forgery (CSRF) vulnerability in Eli EZ SQL Reports Shortcode Widget and DB Backup elisqlreports allows SQL Injection.This issue affects EZ SQL Reports Shortcode Widget and DB Backup: from n/a through <…

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.00216 Published 2025-03-27 No fix listed CWE-352
TI-2025-22057 CVE-2025-30787 · GHSA-wg9v-hwjw-wm7j

WordPress EZ SQL Reports Shortcode Widget and DB Backup plugin <= 5.25.08 - CSRF to Stored XSS vulnerability

Priority LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in Eli EZ SQL Reports Shortcode Widget and DB Backup elisqlreports allows Stored XSS.This issue affects EZ SQL Reports Shortcode Widget and DB Backup: from n/a through <= 5…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00182 Published 2025-03-27 No fix listed CWE-352
TI-2025-19758 CVE-2025-26887 · GHSA-9wrj-rmrc-4xx8

WordPress EZ SQL Reports Shortcode Widget and DB Backup plugin <= 5.21.35 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eli EZ SQL Reports Shortcode Widget and DB Backup elisqlreports allows Stored XSS.This issue affects EZ SQL Reports Sh…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00256 Published 2025-02-25 No fix listed CWE-79