Vulnerabilities

TI-2025-42350 CVE-2025-68892 · GHSA-365v-v88v-6gwg

WordPress Scroll rss excerpt plugin <= 5.0 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in [email protected] Scroll rss excerpt scroll-rss-excerpt allows Reflected XSS.This issue affects Scroll rss excerpt:…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00178 Published 2026-01-08 No fix listed CWE-79

TI-2025-33413 CVE-2025-53468 · GHSA-g3gf-ff9j-5685

WordPress Wp tabber widget Plugin <= 4.0 - SQL Injection Vulnerability

LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in [email protected] Wp tabber widget wp-tabber-widget allows SQL Injection.This issue affects Wp tabber widget: from…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00382 Published 2025-09-22 No fix listed CWE-89

TI-2025-26139 CVE-2025-39397 · GHSA-2vpv-qp3f-2f8m

WordPress Anything Popup plugin <= 7.3 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in [email protected] Anything Popup anything-popup allows Reflected XSS.This issue affects Anything Popup: from n/a th…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00293 Published 2025-04-24 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Scroll rss excerpt plugin <= 5.0 - Reflected Cross Site Scripting (XSS) vulnerability

WordPress Wp tabber widget Plugin <= 4.0 - SQL Injection Vulnerability

WordPress Anything Popup plugin <= 7.3 - Reflected Cross Site Scripting (XSS) vulnerability