Vulnerabilities

TI-2025-42334 CVE-2025-68875 · GHSA-v5cj-mgwg-2f9f

WordPress Flaming Password Reset plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jcaruso001 Flaming Password Reset flaming-password-reset allows Stored XSS.This issue affects Flaming Password Reset:…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00154 Published 2026-01-08 No fix listed CWE-79

TI-2024-36484 CVE-2024-54398 · GHSA-92pc-gccf-whq7

WordPress Flaming Forms plugin <= 1.0.1 - CSRF to Stored XSS vulnerability

LOW 31

Cross-Site Request Forgery (CSRF) vulnerability in jcaruso001 Flaming Forms flaming-forms allows Stored XSS.This issue affects Flaming Forms: from n/a through <= 1.0.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00202 Published 2024-12-16 No fix listed CWE-352

Vulnerabilities

Filters

WordPress Flaming Password Reset plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability

WordPress Flaming Forms plugin <= 1.0.1 - CSRF to Stored XSS vulnerability