Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Link Software LLC Clear all filters
TI-2026-25023 CVE-2026-32495 · GHSA-x5qc-mg7g-45gj

WordPress WP Terms Popup plugin <= 2.10.0 - Broken Access Control vulnerability

Priority LOW 39

Missing Authorization vulnerability in Link Software LLC WP Terms Popup wp-terms-popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Terms Popup: from n/a through <= 2.10.0…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00298 Published 2026-03-25 No fix listed CWE-862
TI-2025-12668 CVE-2025-13861 · GHSA-229f-x533-c4r4

HTML Forms – Simple WordPress Forms Plugin <= 1.6.0 - Unauthenticated Stored Cross-Site Scripting

Priority LOW 27

The HTML Forms – Simple WordPress Forms Plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in all versions up to and including 1.6.0 due to insufficient sanitization of fabricated file uplo…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00257 Published 2025-12-17 No fix listed CWE-79
TI-2025-11120 CVE-2025-12125 · GHSA-x258-vqv6-3976

HTML Forms <= 1.5.5 - Authenticated (Admin+) Stored Cross-Site Scripting

Priority LOW 20

The HTML Forms – Simple WordPress Forms Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.5.5 due to insufficient input sanitization and o…

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00205 Published 2025-11-08 No fix listed CWE-79
TI-2025-22350 CVE-2025-31080 · GHSA-pmm6-x9mw-vxqc

WordPress HTML Forms plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Link Software LLC HTML Forms html-forms allows Stored XSS.This issue affects HTML Forms: from n/a through <= 1.5.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00393 Published 2025-04-01 No fix listed CWE-79