Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: miunosoft Clear all filters
TI-2025-10491 CVE-2025-11451 · GHSA-v272-26j6-28cg

Auto Amazon Links – Amazon Associates Affiliate Plugin <= 5.4.3 - Unauthenticated Arbitrary File Read

Priority LOW 39

The Auto Amazon Links – Amazon Associates Affiliate Plugin plugin for WordPress is vulnerable to arbitrary files reads in all versions up to, and including, 5.4.3 via the '/wp-json/wp/v2/aal_ajax_unit_loading' RST API en…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0049 Published 2025-11-11 No fix listed CWE-73
TI-2025-23664 CVE-2025-32599 · GHSA-rx83-6g6q-5m4x

WordPress Task Scheduler Plugin <= 1.6.3 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in miunosoft Task Scheduler task-scheduler allows Reflected XSS.This issue affects Task Scheduler: from n/a through <= 1.…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00352 Published 2025-04-11 No fix listed CWE-79