Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Kevin Weber Clear all filters
TI-2026-80326 CVE-2026-115951 · GHSA-3w39-26hf-72hg

Stored cross-site scripting in WordPress Lazy Load for Videos plugin

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kevin Weber Lazy Load for Videos lazy-load-for-videos allows Stored XSS.This issue affects Lazy Load for Videos: from…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0017 Published 2026-10-26 No fix listed CWE-79
TI-2025-07057 CVE-2025-7732 · GHSA-fjc2-3g68-rj8q

Cross-site scripting in Kevin Weber Lazy Load for Videos

Priority LOW 28

The Lazy Load for Videos plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its lazy‑loading handlers in all versions up to, and including, 2.18.7 due to insufficient input sanitization and output esca…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00254 Published 2025-08-27 No fix listed CWE-79
TI-2025-22632 CVE-2025-31451 · GHSA-gxgw-3343-jpx9

WordPress wBounce plugin <= 1.8.1 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kevinweber wBounce wbounce allows Stored XSS.This issue affects wBounce: from n/a through <= 1.8.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00214 Published 2025-03-28 No fix listed CWE-79