Vulnerabilities

TI-2025-30182 CVE-2025-47685 · GHSA-wcxf-x2c5-mpc6

WordPress Contribuinte Checkout plugin <= 2.0.03 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in Moloni Contribuinte Checkout contribuinte-checkout allows Stored XSS.This issue affects Contribuinte Checkout: from n/a through <= 2.0.03.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00139 Published 2025-05-07 No fix listed CWE-352

TI-2024-25928 CVE-2024-38694 · GHSA-x2v6-734p-pjc6

WordPress Moloni plugin <= 4.7.4 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Moloni allows Reflected XSS.This issue affects Moloni: from n/a through 4.7.4.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00287 Published 2024-07-20 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Contribuinte Checkout plugin <= 2.0.03 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

WordPress Moloni plugin <= 4.7.4 - Reflected Cross Site Scripting (XSS) vulnerability