Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Hijiriworld Clear all filters
TI-2024-00224 CVE-2024-0249 · GHSA-76h7-whc6-vxcf

Advanced Schedule Posts <= 2.1.8 - Reflected XSS

Priority MEDIUM 64

The Advanced Schedule Posts WordPress plugin through 2.1.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high priv…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00324 Published 2025-05-15 No fix listed CWE-79
TI-2023-00961 CVE-2023-1016 · GHSA-qj2q-q979-fccj

Intuitive Custom Post Order <= 3.1.4.1 - Authenticated (Admin+) SQL Injection

Priority LOW 36

The Intuitive Custom Post Order plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 3.1.4.1, due to insufficient escaping on the user supplied 'objects' and 'tags' parameters and lack of…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00971 Published 2023-06-09 No fix listed CWE-89