Vulnerabilities

TI-2025-20921 CVE-2025-28978 · GHSA-c3hj-x7pq-fgmv

WordPress SB Breadcrumbs plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hung Trang Si SB Breadcrumbs sb-breadcrumbs allows Reflected XSS.This issue affects SB Breadcrumbs: from n/a through <…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0026 Published 2025-07-04 No fix listed CWE-79

TI-2024-32231 CVE-2024-48029 · GHSA-j6vx-9w7x-j8g7

WordPress SB Random Posts Widget plugin <= 1.0 - Local File Inclusion vulnerability

LOW 36

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Hung Trang Si SB Random Posts Widget sb-random-posts-widget allows PHP Local File Inclusion.This is…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.0056 Published 2024-10-16 No fix listed CWE-98

Vulnerabilities

Filters

WordPress SB Breadcrumbs plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

WordPress SB Random Posts Widget plugin <= 1.0 - Local File Inclusion vulnerability