Vulnerabilities

TI-2025-16170 CVE-2025-22265 · GHSA-qwg6-xhp2-3c8q

WordPress EMI Calculator plugin <= 1.1 - Settings Change vulnerability

LOW 35

Missing Authorization vulnerability in mgplugin EMI Calculator emi-calculator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EMI Calculator: from n/a through <= 1.1.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00384 Published 2025-01-31 No fix listed CWE-862

TI-2025-18473 CVE-2025-24756 · GHSA-g7mw-xh95-cg69

WordPress Roi Calculator plugin <= 1.0 - CSRF to Stored XSS vulnerability

LOW 31

Cross-Site Request Forgery (CSRF) vulnerability in mgplugin Roi Calculator roi-calculator allows Stored XSS.This issue affects Roi Calculator: from n/a through <= 1.0.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00193 Published 2025-01-24 No fix listed CWE-352

TI-2024-11649 CVE-2024-12555 · GHSA-839r-wr7g-6r3v

SIP Calculator <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting

LOW 27

The SIP Calculator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00202 Published 2024-12-14 No fix listed CWE-352

Vulnerabilities

Filters

WordPress EMI Calculator plugin <= 1.1 - Settings Change vulnerability

WordPress Roi Calculator plugin <= 1.0 - CSRF to Stored XSS vulnerability

SIP Calculator <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting