Vulnerabilities

TI-2025-39087 CVE-2025-62939 · GHSA-v739-2jgg-rcmx

WordPress Open Currency Converter plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joe Open Currency Converter artiss-currency-converter allows Stored XSS.This issue affects Open Currency Converter: fr…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00204 Published 2025-10-27 No fix listed CWE-79

TI-2025-23552 CVE-2025-32487 · GHSA-5hpp-r359-82qx

WordPress Waymark plugin <= 1.5.2 - Server Side Request Forgery (SSRF) Vulnerability

LOW 22

Server-Side Request Forgery (SSRF) vulnerability in Joe Waymark waymark allows Server Side Request Forgery.This issue affects Waymark: from n/a through <= 1.5.2.

CVSS 3.1MEDIUM 4.9 Network Low privileges No interaction EPSS 0.00298 Published 2025-04-09 No fix listed CWE-918

TI-2025-23560 CVE-2025-32495 · GHSA-737j-v765-x69q

WordPress Waymark plugin <= 1.5.3 - Cross Site Scripting (XSS) Vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joe Waymark waymark allows Stored XSS.This issue affects Waymark: from n/a through <= 1.5.3.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00368 Published 2025-04-09 No fix listed CWE-79

TI-2025-19686 CVE-2025-26770 · GHSA-6mw6-xx7c-fvf9

WordPress Waymark plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joe Waymark waymark allows Stored XSS.This issue affects Waymark: from n/a through <= 1.5.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00234 Published 2025-02-17 No fix listed CWE-79

TI-2025-18375 CVE-2025-24658 · GHSA-fg8c-xgcm-8446

WordPress Auction Nudge – Your eBay on Your Site plugin <= 7.2.0 - Cross Site Scripting (XSS) vulnerability

LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joe Auction Nudge – Your eBay on Your Site auction-nudge allows Stored XSS.This issue affects Auction Nudge – Your eBa…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2025-01-24 No fix listed CWE-79