Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Followmedarling Clear all filters
TI-2025-32356 CVE-2025-51529 · GHSA-wj4j-558c-wmpc

Incorrect Access Control in the AJAX endpoint functionality in jonkastonka Cookies and…

Priority MEDIUM 57

Incorrect Access Control in the AJAX endpoint functionality in jonkastonka Cookies and Content Security Policy plugin through version 2.29 allows remote attackers to cause a denial of service (database server resource ex…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00443 Published 2025-08-19 No fix listed CWE-284
TI-2023-21455 CVE-2023-40662 · GHSA-7x48-vfw5-vwj8

WordPress Cookies and Content Security Policy Plugin <= 2.15 is vulnerable to Sensitive Data Exposure

Priority LOW 34

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Jonk @ Follow me Darling Cookies and Content Security Policy.This issue affects Cookies and Content Security Policy: from n/a through 2.15.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00667 Published 2023-11-30 No fix listed CWE-200
TI-2023-01728 CVE-2023-1840 · GHSA-wpcc-gp5g-rr4p

Sp*tify Play Button for WordPress <= 2.07 - Authenticated (Administrator+) Stored Cross-Site Scripting

Priority LOW 22

The Sp*tify Play Button for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 2.07 due to insufficient input sanitization and output escaping…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00352 Published 2023-04-04 No fix listed CWE-79