Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Jenst Clear all filters
TI-2025-26165 CVE-2025-39423 · GHSA-33mx-vpmc-fg9c

WordPress Add to Header plugin <= 1.0 - CSRF to XSS vulnerability

Priority LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in Jenst Add to Header add-to-header allows Stored XSS.This issue affects Add to Header: from n/a through <= 1.0.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00152 Published 2025-04-17 No fix listed CWE-352
TI-2025-21849 CVE-2025-30574 · GHSA-875m-425m-pmch

WordPress Mobile Navigation plugin <= - 1.5 Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jenst Mobile Navigation mobile-navigation allows Stored XSS.This issue affects Mobile Navigation: from n/a through <=…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00354 Published 2025-03-24 No fix listed CWE-79
TI-2025-20159 CVE-2025-27312 · GHSA-p4vv-vjj8-538h

WordPress WP Sitemap plugin <= 1.0 - SQL Injection vulnerability

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jenst WP Sitemap wp-sitemap allows SQL Injection.This issue affects WP Sitemap: from n/a through <= 1.0.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00361 Published 2025-02-24 No fix listed CWE-89