Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: hayyatapps Clear all filters
TI-2025-13296 CVE-2025-14554 · GHSA-9w62-m7xw-g7m6

Cross-site scripting in hayyatapps Sell BTC – Cryptocurrency Selling Calculator

Priority LOW 38

The Sell BTC - Cryptocurrency Selling Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'orderform_data' AJAX action in all versions up to, and including, 1.5 due to insufficient input…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00354 Published 2026-01-31 No fix listed CWE-79
TI-2025-12362 CVE-2025-13531 · GHSA-r66h-95rg-mcj6

Stylish Order Form Builder <= 1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'product_name' Parameter

Priority LOW 28

The Stylish Order Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'product_name' parameter in all versions up to, and including, 1.0 due to insufficient input sanitization and outpu…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00289 Published 2026-01-07 No fix listed CWE-79