Vulnerabilities

TI-2025-17292 CVE-2025-23525 · GHSA-v7mx-c56x-8rqj

WordPress Kv Compose Email From Dashboard plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kvvaradha Kv Compose Email From Dashboard kv-send-email-from-admin allows Reflected XSS.This issue affects Kv Compose…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00308 Published 2025-02-14 No fix listed CWE-79

TI-2025-17360 CVE-2025-23593 · GHSA-4qcm-8vwx-5fcx

WordPress EmailPress plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kvvaradha EmailPress emailpress allows Reflected XSS.This issue affects EmailPress: from n/a through <= 1.0.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00308 Published 2025-02-03 No fix listed CWE-79

TI-2023-23964 CVE-2023-44470 · GHSA-3q5r-w7pw-96xm

WordPress Kv TinyMCE Editor Add Fonts Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Kvvaradha Kv TinyMCE Editor Add Fonts plugin <= 1.1 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00267 Published 2023-10-10 No fix listed CWE-352

Vulnerabilities

Filters

WordPress Kv Compose Email From Dashboard plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

WordPress EmailPress plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

WordPress Kv TinyMCE Editor Add Fonts Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)