Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: india-web-developer Clear all filters
TI-2024-11682 CVE-2024-12590 · GHSA-qr56-97jh-6556

WP Youtube Gallery <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter

Priority LOW 28

The WP Youtube Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter in all versions up to, and including, 1.9 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00283 Published 2025-01-07 No fix listed CWE-79
TI-2024-10353 CVE-2024-11178 · GHSA-86hc-w3w8-r2v5

Login With OTP <= 1.4.2 - Authentication Bypass via Weak OTP

Priority LOW 38

The Login With OTP plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.4.2.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00647 Published 2024-12-06 No fix listed CWE-288
TI-2024-08834 CVE-2024-9521 · GHSA-fr85-7j9q-8cxc

SEO Manager <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta

Priority LOW 28

The SEO Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post meta in versions up to, and including, 1.9 due to insufficient input sanitization and output escaping on user supplied attributes…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00283 Published 2024-10-16 No fix listed CWE-79