Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

10 records

Vendor: Magnigenie Clear all filters
TI-2025-38451 CVE-2025-62129 · GHSA-vqj8-h258-qp79

WordPress RestroPress plugin <= 3.2.7 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in Magnigenie RestroPress restropress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RestroPress: from n/a through <= 3.2.7.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00222 Published 2025-12-31 No fix listed CWE-862
TI-2025-42472 CVE-2025-69017 · GHSA-7pr7-7wh6-j8cc

WordPress RestroPress plugin <= 3.2.8.6 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magnigenie RestroPress restropress allows Stored XSS.This issue affects RestroPress: from n/a through <= 3.2.8.6.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00159 Published 2025-12-30 No fix listed CWE-79
TI-2025-40625 CVE-2025-66100 · GHSA-fvm2-prp9-qcwm

WordPress RestroPress plugin <= 3.2.3.5 - Broken Access Control vulnerability

Priority LOW 28

Missing Authorization vulnerability in Magnigenie RestroPress restropress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RestroPress: from n/a through <= 3.2.3.5.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00238 Published 2025-12-18 No fix listed CWE-862
TI-2025-23752 CVE-2025-32687 · GHSA-379w-vvjw-9pqf

WordPress Review Stars Count For WooCommerce plugin <= 2.0 - SQL Injection Vulnerability

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Magnigenie Review Stars Count For WooCommerce review-stars-count-for-woocommerce allows SQL Injection.This issue affec…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00358 Published 2025-04-10 No fix listed CWE-89
TI-2025-23014 CVE-2025-31877 · GHSA-39pr-gwj2-95p4

WordPress RestroPress plugin <= 3.2.8 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in Magnigenie RestroPress restropress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RestroPress: from n/a through <= 3.2.8.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00252 Published 2025-04-01 No fix listed CWE-862
TI-2024-23588 CVE-2024-35719 · GHSA-7g2w-hpjx-7xgx

WordPress RestroPress plugin <= 3.1.2.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in MagniGenie RestroPress allows Stored XSS.This issue affects RestroPress: from n/a through 3.1.2.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00276 Published 2024-06-08 No fix listed CWE-79
TI-2021-07250 CVE-2021-24971 · GHSA-qhjq-4534-xhgr

WP Responsive Menu < 3.1.7.1 - Subscriber+ Settings Update to Stored XSS

Priority LOW 25

The WP Responsive Menu WordPress plugin before 3.1.7.1 does not have capability and CSRF checks in the wpr_live_update AJAX action, as well as do not sanitise and escape some of the data submitted.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.006 Published 2022-02-28 Fixed in 3.1.7.1 CWE-79