Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: gallagherwebsitedesign Clear all filters
TI-2026-01578 CVE-2026-1913 · GHSA-j2r9-9g62-pcp4

Cross-site scripting in gallagherwebsitedesign Gallagher Website Design

Priority LOW 28

The Gallagher Website Design plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's login_link shortcode in all versions up to, and including, 2.6.4 due to insufficient input sanitization and…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00254 Published 2026-04-22 No fix listed CWE-79
TI-2025-00529 CVE-2025-0629 · GHSA-q6qg-c79q-f6q2

Coronavirus (COVID-19) Notice Message <= 1.1.2 - Admin+ Stored XSS

Priority MEDIUM 55

The Coronavirus (COVID-19) Notice Message WordPress plugin through 1.1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting atta…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00267 Published 2025-03-11 No fix listed CWE-79