Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Garrett Grimm Clear all filters
TI-2025-18748 CVE-2025-25079 · GHSA-w73f-wgf8-mmmq

WordPress Simple Select All Text Box plugin <= 3.2 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Garrett Grimm Simple Select All Text Box simple-select-all-text-box allows Stored XSS.This issue affects Simple Select…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0028 Published 2025-02-07 No fix listed CWE-79
TI-2024-35939 CVE-2024-53741 · GHSA-xffh-3x24-mr3c

WordPress Simple Popup plugin <= 4.6 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Garrett Grimm Simple Popup simple-popup-plugin allows DOM-Based XSS.This issue affects Simple Popup: from n/a through…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00239 Published 2024-12-02 No fix listed CWE-79
TI-2024-07923 CVE-2024-8547 · GHSA-rg9r-48rh-6w56

Simple Popup Plugin <= 4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 29

The Simple Popup Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's [popup] shortcode in all versions up to, and including, 4.5 due to insufficient input sanitization and output esc…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00383 Published 2024-09-28 No fix listed CWE-79
TI-2024-25923 CVE-2024-38689 · GHSA-322j-cfcv-3q95

WordPress Simple Popup plugin <= 4.4 - Cross-Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Garrett Grimm Simple Popup allows Stored XSS.This issue affects Simple Popup: from n/a through 4.4.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00311 Published 2024-07-20 No fix listed CWE-79