Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: jankimoradiya Clear all filters
TI-2025-09463 CVE-2025-10313 · GHSA-wg83-xjwq-wqrh

Find And Replace content for WordPress <= 1.1 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting

Priority LOW 37

The Find And Replace content for WordPress plugin for WordPress is vulnerable to unauthorized Stored Cross-Site Scripting and Arbitrary Content Replacement due to a missing capability check on the far_admin_ajax_fun() fu…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00285 Published 2025-10-15 No fix listed CWE-862