Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Maeve Lander Clear all filters
TI-2023-03423 CVE-2023-3666 · GHSA-93g6-qwj4-59m7

Sticky Side Buttons < 2.0.0 - Admin+ Stored XSS

Priority MEDIUM 49

The Sticky Side Buttons WordPress plugin before 2.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the u…

CVSS 3.1LOW 3.3 Network High privileges No interaction EPSS 0.00208 Published 2025-09-03 Fixed in 2.0.0 CWE-79
TI-2025-17371 CVE-2025-23604 · GHSA-fgwg-x6m4-8h2r

WordPress Rezdy Reloaded plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Maeve Lander Rezdy Reloaded reloaded-rezdy allows Stored XSS.This issue affects Rezdy Reloaded: from n/a through <= 1.…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00409 Published 2025-01-22 No fix listed CWE-79
TI-2023-26610 CVE-2023-48780 · GHSA-r8jm-pjg2-c23c

WordPress WP Catalogue Plugin <= 1.7.6 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EnigmaWeb WP Catalogue allows Stored XSS.This issue affects WP Catalogue: from n/a through 1.7.6.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00377 Published 2023-12-14 No fix listed CWE-79