Vulnerabilities

TI-2026-71609 CVE-2026-108487 · GHSA-mjm6-cv7c-p5h8

Stored cross-site scripting in WordPress Books Gallery plugin

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hossni Mubarak Books Gallery wp-books-gallery allows Stored XSS.This issue affects Books Gallery: from n/a through 4.8…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00127 Published 2026-10-13 No fix listed CWE-79

TI-2026-63884 CVE-2026-96822 · GHSA-jgpc-9333-vh2w

WordPress Books Gallery plugin <= 4.8.3 - SQL Injection vulnerability

MEDIUM 46

Unauthenticated SQL Injection in Books Gallery <= 4.8.3 versions.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00283 Published 2026-09-30 No fix listed CWE-89

TI-2025-42761 CVE-2025-69318 · GHSA-5v37-qm3f-mh2p

WordPress JobWP plugin <= 2.4.5 - Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hossni Mubarak JobWP jobwp allows Stored XSS.This issue affects JobWP: from n/a through <= 2.4.5.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00213 Published 2026-01-22 No fix listed CWE-79

TI-2025-35749 CVE-2025-57895 · GHSA-vpqg-fvvr-3q38

WordPress JobWP Plugin <= 2.4.3 - Cross Site Request Forgery (CSRF) Vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Hossni Mubarak JobWP jobwp allows Cross Site Request Forgery.This issue affects JobWP: from n/a through <= 2.4.3.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0014 Published 2025-08-22 No fix listed CWE-352

TI-2025-31890 CVE-2025-49975 · GHSA-gw3g-3m9p-44m4

WordPress JobWP plugin <= 2.4.0 - Cross Site Request Forgery (CSRF) Vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Hossni Mubarak JobWP jobwp allows Cross Site Request Forgery.This issue affects JobWP: from n/a through <= 2.4.0.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00149 Published 2025-06-20 No fix listed CWE-352

TI-2025-29944 CVE-2025-47447 · GHSA-8fgm-3937-8v3v

WordPress Cool Author Box plugin <= 3.0.0 - Cross Site Request Forgery (CSRF) Vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Hossni Mubarak Cool Author Box hm-cool-author-box-widget allows Cross Site Request Forgery.This issue affects Cool Author Box: from n/a through <= 3.0.0.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00168 Published 2025-05-07 No fix listed CWE-352

TI-2025-23362 CVE-2025-32265 · GHSA-g5xx-qr8r-vj38

WordPress JobWP plugin <= 2.3.9 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Hossni Mubarak JobWP jobwp allows Cross Site Request Forgery.This issue affects JobWP: from n/a through <= 2.3.9.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00156 Published 2025-04-04 No fix listed CWE-352

TI-2025-22100 CVE-2025-30830 · GHSA-39hm-72f3-v7g5

WordPress Cool Author Box plugin <= 2.9.9 - Broken Access Control vulnerability

LOW 31

Missing Authorization vulnerability in Hossni Mubarak Cool Author Box hm-cool-author-box-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cool Author Box: from n/a through…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00484 Published 2025-03-27 No fix listed CWE-862

Vulnerabilities

Filters