Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: InfoD74 Clear all filters
TI-2024-30503 CVE-2024-45460 · GHSA-8x4p-8r4m-q8jg

WordPress Flipping Cards plugin <= 1.30 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in manu225 Flipping Cards flipping-cards allows Stored XSS.This issue affects Flipping Cards: from n/a through <= 1.30.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.0026 Published 2024-09-15 No fix listed CWE-79
TI-2024-04284 CVE-2024-4602 · GHSA-cr7c-5w66-wh22

Embed Peertube Playlist < 1.10 - Editor+ Stored XSS

Priority MEDIUM 58

The Embed Peertube Playlist WordPress plugin before 1.10 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when th…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00425 Published 2024-07-13 Fixed in 1.10 CWE-79
TI-2024-03675 CVE-2024-3937

Playlist for Youtube <= 1.32 - Editor+ Stored XSS

Priority LOW 22

The Playlist for Youtube WordPress plugin through 1.32 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00332 Published 2024-05-29 No fix listed CWE-79