Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: Mohsin Rasool Clear all filters
TI-2024-11795 CVE-2024-12722 · GHSA-353c-hm8f-g46h

Twitter Bootstrap Collapse aka Accordian Shortcode <= 1.0 - Stored XSS via Shortcode

Priority MEDIUM 58

The Twitter Bootstrap Collapse aka Accordian Shortcode WordPress plugin through 1.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, w…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00324 Published 2025-05-15 No fix listed CWE-79
TI-2024-10395 CVE-2024-11221 · GHSA-75jq-cq85-m7jx

Full Screen (Page) Background Image Slideshow <= 1.1 - Admin+ Stored XSS

Priority MEDIUM 55

The Full Screen (Page) Background Image Slideshow WordPress plugin through 1.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scriptin…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00359 Published 2025-05-15 No fix listed CWE-79
TI-2025-16625 CVE-2025-22743 · GHSA-w3cv-ccgf-hx85

WordPress Twitter Bootstrap Collapse aka Accordian Shortcode plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mohsin Rasool Twitter Bootstrap Collapse aka Accordian Shortcode twitter-bootstrap-collapse-aka-accordian-shortcode al…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00291 Published 2025-01-15 No fix listed CWE-79
TI-2024-05063 CVE-2024-5448 · GHSA-7547-5vg4-cmwj

PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode <= 1.7 - Contributor+ Stored XSS

Priority MEDIUM 60

The PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode WordPress plugin through 1.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode i…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00315 Published 2024-06-21 No fix listed CWE-79
TI-2024-05062 CVE-2024-5447 · GHSA-7r3w-w46r-49xf

PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode <= 1.7 - Admin+ Stored XSS

Priority MEDIUM 58

The PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode WordPress plugin through 1.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cros…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00319 Published 2024-06-21 No fix listed CWE-79
TI-2024-02871 CVE-2024-3065 · GHSA-mcfx-gc63-q26m

PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode <= 1.7 - Authenticated (Admin+) Stored Cross-Site Scripting

Priority LOW 20

The PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.7 due to insufficient input sa…

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00271 Published 2024-05-23 No fix listed CWE-79