Vulnerabilities

TI-2025-22255 CVE-2025-30985 · GHSA-7v3q-fc37-v2cj

WordPress GNUCommerce plugin <= 1.5.4 - PHP Object Injection vulnerability

MEDIUM 49

Deserialization of Untrusted Data vulnerability in kagla GNUCommerce gnucommerce allows Object Injection.This issue affects GNUCommerce: from n/a through <= 1.5.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00518 Published 2025-04-15 No fix listed CWE-502

TI-2025-19503 CVE-2025-26565 · GHSA-w2ph-8pcw-pr59

WordPress GNUPress Plugin <= 0.2.9 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kagla GNUPress gnupress allows Reflected XSS.This issue affects GNUPress: from n/a through <= 0.2.9.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00381 Published 2025-03-26 No fix listed CWE-79

TI-2025-19502 CVE-2025-26564 · GHSA-rr6x-4q8f-283c

WordPress GNUCommerce Plugin <= 1.5.4 - Reflected Cross Site Scripting (XSS) vulnerability