Vulnerabilities

TI-2026-25049 CVE-2026-32521 · GHSA-qchc-j443-vmp6

WordPress WP Custom Admin Interface plugin <= 7.42 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Northern Beaches Websites WP Custom Admin Interface wp-custom-admin-interface allows DOM-Based XSS.This issue affects…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00167 Published 2026-03-25 No fix listed CWE-79

TI-2026-20196 CVE-2026-25011 · GHSA-wx22-gmgf-5j2h

WordPress WP Custom Admin Interface plugin <= 7.41 - Broken Access Control vulnerability

LOW 19

Missing Authorization vulnerability in Northern Beaches Websites WP Custom Admin Interface wp-custom-admin-interface allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Custom Ad…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00196 Published 2026-02-03 No fix listed CWE-862

TI-2025-39186 CVE-2025-63038 · GHSA-vjhr-4rwp-pw28

WordPress WP Custom Admin Interface plugin <= 7.40 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in Northern Beaches Websites WP Custom Admin Interface wp-custom-admin-interface allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Custom Ad…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00239 Published 2025-12-31 No fix listed CWE-862

TI-2025-18324 CVE-2025-24607 · GHSA-7496-f98j-6hw7

WordPress IdeaPush plugin <= 8.71 - Broken Access Control vulnerability

MEDIUM 48

Missing Authorization vulnerability in Northern Beaches Websites IdeaPush ideapush allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IdeaPush: from n/a through <= 8.71.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00397 Published 2025-02-14 No fix listed CWE-862

TI-2023-24050 CVE-2023-44988 · GHSA-86fm-wq4c-m3q9

WordPress WP Custom Admin Interface plugin <= 7.32 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in Martin Gibson WP Custom Admin Interface allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Custom Admin Interface: from n/a through 7.32.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00337 Published 2025-01-02 No fix listed CWE-862

TI-2023-25873 CVE-2023-47763 · GHSA-rqfj-2r57-4f86

WordPress WP Custom Admin Interface plugin <= 7.31 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in Northern Beaches Websites WP Custom Admin Interface wp-custom-admin-interface allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Custom Ad…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00367 Published 2024-12-09 No fix listed CWE-862

TI-2023-26604 CVE-2023-48774 · GHSA-f47g-ccch-6353

WordPress IdeaPush plugin < 8.58 - Broken Access Control vulnerability

LOW 25

Missing Authorization vulnerability in Martin Gibson IdeaPush allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IdeaPush: from n/a through n/a.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00482 Published 2024-12-09 Fixed in 8.58 CWE-862

TI-2024-10988 CVE-2024-11844 · GHSA-j66f-9h25-hw6j

IdeaPush <= 8.71 - Missing Authorization to Board Term Deletion

LOW 20

The IdeaPush plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the idea_push_taxonomy_save_routine function in all versions up to, and including, 8.71.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00343 Published 2024-12-03 No fix listed CWE-862

TI-2024-25929 CVE-2024-38695 · GHSA-3f24-8wqg-chhj

WordPress WP GoToWebinar plugin <= 15.6 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in Martin Gibson WP GoToWebinar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP GoToWebinar: from n/a through 15.6.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00404 Published 2024-11-01 No fix listed CWE-862

TI-2024-32868 CVE-2024-49275 · GHSA-6qpx-rmj4-mcj5

WordPress IdeaPush plugin <= 8.69 - Cross Site Request Forgery (CSRF) vulnerability

LOW 37

Cross-Site Request Forgery (CSRF) vulnerability in Northern Beaches Websites IdeaPush ideapush allows Cross Site Request Forgery.This issue affects IdeaPush: from n/a through <= 8.69.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00208 Published 2024-10-20 No fix listed CWE-352

TI-2024-29630 CVE-2024-44041 · GHSA-77f2-638h-7wm4

WordPress IdeaPush plugin <= 8.66 - Cross Site Scripting (XSS) vulnerability

LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Northern Beaches Websites IdeaPush ideapush allows Stored XSS.This issue affects IdeaPush: from n/a through <= 8.66.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00276 Published 2024-10-06 No fix listed CWE-79

TI-2024-26010 CVE-2024-38776 · GHSA-3rvv-226f-xrr5

WordPress WP GoToWebinar plugin <= 15.7 - CSRF to XSS vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in Martin Gibson WP GoToWebinar allows Cross-Site Scripting (XSS).This issue affects WP GoToWebinar: from n/a through 15.7.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00158 Published 2024-08-02 No fix listed CWE-352

TI-2024-24780 CVE-2024-37265 · GHSA-99g9-vr9j-hgpq

WordPress IdeaPush plugin <= 8.60 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Martin Gibson IdeaPush allows Stored XSS.This issue affects IdeaPush: from n/a through 8.60.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00261 Published 2024-07-22 No fix listed CWE-79

TI-2024-24965 CVE-2024-37461 · GHSA-rxm4-rcrf-9vfm

WordPress IdeaPush plugin <= 8.65 - Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Martin Gibson IdeaPush allows Stored XSS.This issue affects IdeaPush: from n/a through 8.65.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00327 Published 2024-07-21 No fix listed CWE-79

TI-2024-25906 CVE-2024-38671 · GHSA-5xmw-q86v-8vpg

WordPress WP GoToWebinar plugin <= 15.7 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Martin Gibson WP GoToWebinar allows Stored XSS.This issue affects WP GoToWebinar: from n/a through 15.7.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0034 Published 2024-07-20 No fix listed CWE-79

TI-2024-21671 CVE-2024-32797 · GHSA-4r5q-wgf5-6r7g

WordPress WP LinkedIn Auto Publish plugin <= 8.11 - Broken Access Control vulnerability

LOW 24

Missing Authorization vulnerability in Martin Gibson WP LinkedIn Auto Publish.This issue affects WP LinkedIn Auto Publish: from n/a through 8.11.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00314 Published 2024-06-09 No fix listed CWE-862

TI-2024-21678 CVE-2024-32804 · GHSA-6722-5x9x-9h26

WordPress WP GoToWebinar plugin <= 14.46 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in Martin Gibson WP GoToWebinar.This issue affects WP GoToWebinar: from n/a through 14.46.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00406 Published 2024-06-09 No fix listed CWE-862

TI-2023-25555 CVE-2023-47237 · GHSA-4j52-999q-vxgg

WordPress WP Google My Business Auto Publish Plugin <= 3.7 is vulnerable to Cross Site Request Forgery (CSRF)

MEDIUM 40

Cross-Site Request Forgery (CSRF) vulnerability in Martin Gibson Auto Publish for Google My Business plugin <= 3.7 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0027 Published 2023-11-09 No fix listed CWE-352

TI-2023-25504 CVE-2023-47181 · GHSA-gj94-rc7p-wwm6

WordPress IdeaPush Plugin <= 8.52 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Martin Gibson IdeaPush plugin <= 8.52 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00394 Published 2023-11-08 No fix listed CWE-79

TI-2023-24592 CVE-2023-45832 · GHSA-f786-pr7j-f76x

WordPress WP GoToWebinar Plugin <= 14.45 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Martin Gibson WP GoToWebinar plugin <= 14.45 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00509 Published 2023-10-24 No fix listed CWE-79

Vulnerabilities

Filters