Vulnerabilities

TI-2025-38436 CVE-2025-62114 · GHSA-mvwr-m5xg-5w4h

WordPress Download Media Library plugin <= 0.2.1 - Sensitive Data Exposure vulnerability

LOW 29

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in marcelotorres Download Media Library download-media-library allows Retrieve Embedded Sensitive Data.This issue affects Download…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00228 Published 2025-12-31 No fix listed CWE-497

TI-2024-25260 CVE-2024-37954 · GHSA-c57q-ppqw-4ppw

WordPress Simple Responsive Slider plugin <= 0.2.2.5 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in marcelotorres Simple Responsive Slider allows Reflected XSS.This issue affects Simple Responsive Slider: from n…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00288 Published 2024-07-20 No fix listed CWE-79

TI-2023-12334 CVE-2023-27624 · GHSA-6h6r-qwxw-8p3r

WordPress Redirect After Login Plugin <= 0.1.9 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Marcelotorres Redirect After Login plugin <= 0.1.9 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00619 Published 2023-06-13 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Download Media Library plugin <= 0.2.1 - Sensitive Data Exposure vulnerability

WordPress Simple Responsive Slider plugin <= 0.2.2.5 - Reflected Cross Site Scripting (XSS) vulnerability

WordPress Redirect After Login Plugin <= 0.1.9 is vulnerable to Cross Site Scripting (XSS)