Vulnerabilities

TI-2025-26280 CVE-2025-39538 · GHSA-62fp-h6c8-g6f9

WordPress WP-Advanced-Search plugin <= 3.3.9.4 - Arbitrary File Upload Vulnerability

LOW 30

Unrestricted Upload of File with Dangerous Type vulnerability in Mathieu Chartier WP-Advanced-Search wp-advanced-search allows Upload a Web Shell to a Web Server.This issue affects WP-Advanced-Search: from n/a through <=…

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00499 Published 2025-04-16 No fix listed CWE-434

TI-2025-23549 CVE-2025-32484 · GHSA-v9rj-9v4c-4gv6

WordPress WP-Planification – WP-Planning plugin <= 2.3.1 - CSRF to Stored XSS vulnerability

LOW 31

Cross-Site Request Forgery (CSRF) vulnerability in Mathieu Chartier WP-Planification wp-planification allows Stored XSS.This issue affects WP-Planification: from n/a through <= 2.3.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00193 Published 2025-04-09 No fix listed CWE-352

Vulnerabilities

Filters

WordPress WP-Advanced-Search plugin <= 3.3.9.4 - Arbitrary File Upload Vulnerability

WordPress WP-Planification – WP-Planning plugin <= 2.3.1 - CSRF to Stored XSS vulnerability