Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: gdragon Clear all filters
TI-2026-67441 CVE-2026-93430 · GHSA-2fcm-3887-5h6p

Cross-site scripting in gdragon GD Rating System

Priority LOW 31

The GD Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'title' and 'url' Render Args in gdrts_live_handler AJAX in all versions up to, and including, 3.7.1 due to insufficient input sa…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00272 Published 2026-10-03 No fix listed CWE-79
TI-2025-03019 CVE-2025-3436 · GHSA-f8m2-chrx-j8v6

coreActivity: Activity Logging for WordPress <= 2.7 - Authenticated (Subscriber+) SQL Injection

Priority LOW 29

The coreActivity: Activity Logging for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'order' and 'orderby' parameters in all versions up to, and including, 2.7 due to insufficient escaping on the…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00369 Published 2025-04-08 No fix listed CWE-89
TI-2024-10448 CVE-2024-11278 · GHSA-hr9r-5hcm-g5g2

GD bbPress Attachments <= 4.7.2 - Reflected Cross-Site Scripting

Priority LOW 27

The GD bbPress Attachments plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 4.7.2.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00404 Published 2024-11-20 No fix listed CWE-79
TI-2024-10372 CVE-2024-11198 · GHSA-545f-546q-5w2v

GD Rating System <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via extra_class Parameter

Priority LOW 29

The GD Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘extra_class’ parameter in all versions up to, and including, 3.6.1 due to insufficient input sanitization and output escapin…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0037 Published 2024-11-19 No fix listed CWE-79