Vulnerabilities

TI-2025-05270 CVE-2025-5842 · GHSA-7538-cfh9-c2g6

Modern Design Library <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via class Parameter

LOW 28

The Modern Design Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘class’ parameter in all versions up to, and including, 1.1.4 due to insufficient input sanitization and output escaping…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00318 Published 2025-06-26 No fix listed CWE-79

TI-2024-34598 CVE-2024-51684 · GHSA-fc3r-7v33-7x96

WordPress W3P SEO plugin < 1.8.6 - CSRF to Stored XSS vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in Ciprian Popescu W3P SEO wp-perfect-plugin allows Stored XSS.This issue affects W3P SEO: from n/a through < 1.8.6.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00168 Published 2024-11-14 No fix listed CWE-352

TI-2024-09073 CVE-2024-9776 · GHSA-w6g8-4xp6-6cr3

ImagePress - Image Gallery <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings

LOW 22

The ImagePress – Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00357 Published 2024-10-12 No fix listed CWE-79

TI-2024-09075 CVE-2024-9778 · GHSA-f3v3-rc63-5rrv

ImagePress – Image Gallery <= 1.2.2 - Cross-Site Request Forgery to Plugin Settings Update

LOW 20

The ImagePress – Image Gallery plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.2.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00253 Published 2024-10-12 No fix listed CWE-352

TI-2024-23574 CVE-2024-35705 · GHSA-w7w6-4q7c-7ccc

WordPress Block for Font Awesome plugin <= 1.4.4 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Ciprian Popescu Block for Font Awesome allows Stored XSS.This issue affects Block for Font Awesome: from n/a th…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00261 Published 2024-06-08 No fix listed CWE-79

TI-2023-27161 CVE-2023-49751 · GHSA-xx2w-rcmq-q3gc

WordPress Block for Font Awesome Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Ciprian Popescu Block for Font Awesome.This issue affects Block for Font Awesome: from n/a through 1.4.0.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00259 Published 2023-12-17 No fix listed CWE-352

TI-2023-24097 CVE-2023-45049 · GHSA-x529-3p36-rxh5

WordPress YouTube Playlist Player Plugin <= 4.6.7 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Ciprian Popescu YouTube Playlist Player plugin <= 4.6.7 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00361 Published 2023-10-18 No fix listed CWE-79

TI-2023-16803 CVE-2023-33931 · GHSA-cqm8-f9h4-j223

WordPress YouTube Playlist Player Plugin <= 4.6.4 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Ciprian Popescu YouTube Playlist Player plugin <= 4.6.4 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00256 Published 2023-05-28 No fix listed CWE-352

TI-2013-03905 CVE-2013-4454 · GHSA-x6wj-3gv5-hp5c

WordPress Portable phpMyAdmin Plugin 1.4.1 has Multiple Security Bypass Vulnerabilities

MEDIUM 46

WordPress Portable phpMyAdmin Plugin 1.4.1 has Multiple Security Bypass Vulnerabilities

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.03734 Published 2020-02-18 No fix listed CWE-287

Vulnerabilities

Filters