Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: gijo Clear all filters
TI-2026-86174 CVE-2026-119175 · GHSA-jhch-7rhx-vfrf

Stored cross-site scripting in Flying Images WordPress plugin

Priority LOW 31

The Flying Images: Optimize and Lazy Load Images for Faster Page Speed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 2.4.15 due to ins…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00306 Published 2026-11-07 No fix listed CWE-79
TI-2026-75142 CVE-2026-109990 · GHSA-x96v-mfm7-f4rv

Stored cross-site scripting in Flying Scripts WordPress plugin

Priority LOW 32

The Flying Scripts: Delay JavaScript to Improve Site Speed & Performance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 1.2.4 due to in…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00331 Published 2026-10-16 No fix listed CWE-79
TI-2025-10936 CVE-2025-11927 · GHSA-69r8-298v-gc69

Cross-site scripting in gijo Flying Images: Optimize and Lazy Load Images for Faster Page…

Priority LOW 20

The Flying Images: Optimize and Lazy Load Images for Faster Page Speed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.4.14 due to insufficient…

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00241 Published 2025-11-01 No fix listed CWE-79