Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: giuliopanda Clear all filters
TI-2024-12432 CVE-2024-13390 · GHSA-q3h9-rwc2-qqjg

ADFO – Custom data in admin dashboard <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 30

The ADFO – Custom data in admin dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'adfo_list' shortcode in all versions up to, and including, 1.9.1 due to insufficient input san…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00323 Published 2025-02-19 No fix listed CWE-79
TI-2024-08685 CVE-2024-9361 · GHSA-cg2g-6w24-28fp

Missing authorization in giuliopanda Bulk images optimizer: Resize, optimize, convert to…

Priority LOW 20

The Bulk images optimizer: Resize, optimize, convert to webp, rename … plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'save_configuration' function in all…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00323 Published 2024-10-18 No fix listed CWE-862
TI-2024-03823 CVE-2024-4104 · GHSA-qgvf-5jhp-5rmx

ADFO – Custom data in admin dashboard <= 1.9.0 - Reflected Cross-Site Scripting

Priority LOW 28

The ADFO – Custom data in admin dashboard plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'dbp_id' parameter in all versions up to, and including, 1.9.0 due to insufficient input sanitization…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00507 Published 2024-05-09 No fix listed CWE-79