Vulnerabilities

TI-2025-36022 CVE-2025-58217 · GHSA-m3j9-7wcp-qmh8

WordPress Instant Breaking News Plugin <= 1.0 - Cross Site Request Forgery (CSRF) Vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in GeroNikolov Instant Breaking News instant-breaking-news allows Stored XSS.This issue affects Instant Breaking News: from n/a through <= 1.0.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00113 Published 2025-08-27 No fix listed CWE-352

TI-2024-34793 CVE-2024-51889 · GHSA-8xx7-6q95-5vcp

WordPress Fancy User List plugin <= 3.1 - Stored Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GeroNikolov Fancy User List fancy-user-listing allows Stored XSS.This issue affects Fancy User List: from n/a through…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00309 Published 2024-11-19 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Instant Breaking News Plugin <= 1.0 - Cross Site Request Forgery (CSRF) Vulnerability

WordPress Fancy User List plugin <= 3.1 - Stored Cross Site Scripting (XSS) vulnerability