TI-2026-36102 CVE-2026-48836 · GHSA-jwwx-7m25-m3h7
WordPress Easy Invoice plugin <= 2.1.19 - Remote Code Execution (RCE) vulnerability
Priority MEDIUM 50
Unauthenticated Remote Code Execution (RCE) in Easy Invoice <= 2.1.19 versions.
Vulnerabilities
6 records
TI-2025-35837 CVE-2025-57985 · GHSA-wq67-359w-gv3w
WordPress Ultimate Watermark Plugin <= 1.1 - Broken Access Control Vulnerability
Priority LOW 20
Missing Authorization vulnerability in MantraBrain Ultimate Watermark ultimate-watermark allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Watermark: from n/a through <=…
TI-2025-18347 CVE-2025-24630 · GHSA-fx25-pqmv-qr46
WordPress Sikshya LMS Plugin <= 0.0.21 - Reflected Cross Site Scripting (XSS) vulnerability
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MantraBrain Sikshya LMS sikshya allows Reflected XSS.This issue affects Sikshya LMS: from n/a through <= 0.0.21.
TI-2024-11248 CVE-2024-12127 · GHSA-6wqm-wv7q-pgvj
Cross-site scripting in MantraBrain Learning Management System, eLearning, Course…
Priority LOW 27
The Learning Management System, eLearning, Course Builder, WordPress LMS Plugin – Sikshya LMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘page’ parameter in all versions up to, and inclu…
TI-2022-04562 CVE-2022-4974 · GHSA-p5fp-r7v7-h5q7
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Priority LOW 28
The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_de…
TI-2022-23513 CVE-2022-47436 · GHSA-jx73-f6rp-8fxv
WordPress Yatra Plugin <= 2.1.14 is vulnerable to Cross Site Scripting (XSS)
Priority LOW 27
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MantraBrain Yatra allows Stored XSS.This issue affects Yatra: from n/a through 2.1.14.