Vulnerabilities

TI-2026-05647 CVE-2026-6439 · GHSA-gc8m-6q8j-fh75

Cross-site scripting in jconti VideoZen

LOW 20

The VideoZen plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 1.0.1.

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00199 Published 2026-04-17 No fix listed CWE-79

TI-2026-04405 CVE-2026-5050 · GHSA-6pcx-jf98-3w2h

Improper signature verification in jconti Payment Gateway for Redsys & WooCommerce Lite

LOW 38

The Payment Gateway for Redsys & WooCommerce Lite plugin for WordPress is vulnerable to Improper Verification of Cryptographic Signature in versions up to, and including, 7.0.0 due to successful_request() handlers calcul…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00234 Published 2026-04-16 No fix listed CWE-347

TI-2025-05352 CVE-2025-5926 · GHSA-75f5-mjcx-jhjh

Link Shield <= 0.5.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting

LOW 26

The Link Shield plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.5.4.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00129 Published 2025-06-13 No fix listed CWE-352

Vulnerabilities

Filters

Cross-site scripting in jconti VideoZen

Improper signature verification in jconti Payment Gateway for Redsys & WooCommerce Lite

Link Shield <= 0.5.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting