Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: man4toman Clear all filters
TI-2026-85797 CVE-2026-97642 · GHSA-hfpr-hhhq-22gf

Stored cross-site scripting in Wp Parsidate WordPress plugin

Priority LOW 28

The Wp Parsidate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the calendar Gutenberg block's 'theme' attribute in versions up to, and including, 6.4.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00297 Published 2026-11-06 No fix listed CWE-79
TI-2024-10221 CVE-2024-11032 · GHSA-4253-j7xf-mm3q

Parsi Date <= 5.1.1 - Reflected Cross-Site Scripting via add_query_arg Parameter

Priority LOW 28

The Parsi Date plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 5.1.1.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00489 Published 2024-11-26 No fix listed CWE-79