Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Jordymeow Clear all filters
TI-2024-00344 CVE-2024-0378 · GHSA-f5xj-5mm5-9v8f

AI Engine <= 2.2.0 - Unauthenticated Stored Cross-Site Scripting

Priority LOW 36

The AI Engine: Chatbots, Generators, Assistants, GPT 4 and more! plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the AI chat data when discussion tracking is enabled in all versions up to, and inclu…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.0061 Published 2024-03-02 No fix listed CWE-79
TI-2024-01339 CVE-2024-1434 · GHSA-pm76-25c2-x352

WordPress Media Alt Renamer Plugin 0.0.1 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jordy Meow Media Alt Renamer allows Stored XSS.This issue affects Media Alt Renamer: from n/a through 0.0.1.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00336 Published 2024-02-29 No fix listed CWE-79