Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Narnoo Clear all filters
TI-2025-17447 CVE-2025-23680 · GHSA-93vr-r8wm-997h

WordPress Narnoo Operator plugin <= 2.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Narnoo Narnoo Operator narnoo-shortcodes allows Reflected XSS.This issue affects Narnoo Operator: from n/a through <=…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00393 Published 2025-03-26 No fix listed CWE-79
TI-2024-34622 CVE-2024-51708 · GHSA-w6jq-2jfh-gxc9

WordPress Narnoo Commerce Manager plugin <= 1.6.0 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Narnoo Narnoo Commerce Manager narnoo-commerce-manager allows Reflected XSS.This issue affects Narnoo Commerce Manager…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00287 Published 2024-11-09 No fix listed CWE-79