Vulnerabilities

TI-2025-31486 CVE-2025-49438 · GHSA-6r75-pwjm-2jh4

WordPress Simple Login Log plugin <= 1.1.3 - PHP Object Injection vulnerability

LOW 35

Deserialization of Untrusted Data vulnerability in Max Chirkov Simple Login Log allows Object Injection.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00401 Published 2025-08-20 No fix listed CWE-502

TI-2025-18751 CVE-2025-25082 · GHSA-8m62-94cc-x29c

WordPress flexIDX Home Search plugin <= 2.1.2 - Stored Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Max Chirkov FlexIDX Home Search flexidx-home-search allows Stored XSS.This issue affects FlexIDX Home Search: from n/a…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0028 Published 2025-02-07 No fix listed CWE-79

TI-2023-11657 CVE-2023-26520 · GHSA-hgjv-8v3q-g4h2

WordPress Advanced Text Widget plugin <= 2.1.2 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in Max Chirkov Advanced Text Widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Text Widget : from n/a through 2.1.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00442 Published 2024-12-09 No fix listed CWE-862

Vulnerabilities

Filters

WordPress Simple Login Log plugin <= 1.1.3 - PHP Object Injection vulnerability

WordPress flexIDX Home Search plugin <= 2.1.2 - Stored Cross Site Scripting (XSS) vulnerability

WordPress Advanced Text Widget plugin <= 2.1.2 - Broken Access Control vulnerability