Vulnerabilities

TI-2025-22237 CVE-2025-30967 · GHSA-gvjv-gp9v-cgcq

WordPress WPJobBoard plugin < 5.11.1 - CSRF to Remote Code Execution (RCE) vulnerability

MEDIUM 42

Cross-Site Request Forgery (CSRF) vulnerability in NotFound WPJobBoard allows Upload a Web Shell to a Web Server.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00244 Published 2025-04-15 Fixed in 5.11.1 CWE-352

TI-2025-22236 CVE-2025-30966 · GHSA-v2g6-2gw9-gx3g

WordPress WPJobBoard plugin < 5.11.1 - Path Traversal vulnerability

LOW 24

Path Traversal vulnerability in NotFound WPJobBoard allows Path Traversal.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00327 Published 2025-04-15 Fixed in 5.11.1 CWE-35

TI-2025-19879 CVE-2025-27008 · GHSA-pqqp-3627-c6r6

WordPress Unlimited Timeline < 1.6.1 - Broken Access Control Vulnerability

LOW 39

Missing Authorization vulnerability in NotFound Unlimited Timeline unlimited-timeline allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Unlimited Timeline: from n/a through < 1.6.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00455 Published 2025-04-15 No fix listed CWE-862

TI-2025-19646 CVE-2025-26730 · GHSA-8266-2wq4-3fxv

WordPress Macro Calculator with Admin Email Optin & Data plugin <= 1.0 - Multiple Vulnerabilities vulnerability

LOW 39

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in NotFound Macro Calculator with Admin Email Optin & Data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0048 Published 2025-04-15 No fix listed CWE-497

TI-2025-16168 CVE-2025-22263 · GHSA-jw7f-23qw-5686

WordPress Global Gallery plugin <= 8.8.0 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Global Gallery allows Reflected XSS.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00293 Published 2025-04-15 No fix listed CWE-79

TI-2025-22235 CVE-2025-30965 · GHSA-mgcw-m7m8-h679

WordPress WPJobBoard plugin < 5.11.1 - Multiple Cross Site Request Forgery (CSRF) vulnerabilities vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in NotFound WPJobBoard allows Cross Site Request Forgery.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00153 Published 2025-04-15 Fixed in 5.11.1 CWE-352

TI-2025-22590 CVE-2025-31409 · GHSA-xj7c-fgvc-fxmf

WordPress Bridge Core plugin < 3.3.1 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Bridge Core allows Stored XSS.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00297 Published 2025-04-01 Fixed in 3.3.1 CWE-79

TI-2025-19843 CVE-2025-26972 · GHSA-2xwj-6795-v7p4

WordPress PrivateContent plugin <= 8.11.5 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound PrivateContent.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00228 Published 2025-03-15 No fix listed CWE-79

TI-2025-19811 CVE-2025-26940 · GHSA-q48q-mrmp-gpx2

WordPress Pie Register Premium plugin <= 3.8.3.2 - Path Traversal to Non-Arbitrary File Deletion vulnerability

LOW 28

Path Traversal vulnerability in NotFound Pie Register Premium.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00389 Published 2025-03-15 No fix listed CWE-35

TI-2025-18798 CVE-2025-25129 · GHSA-xp77-7ppq-j5jg

WordPress Callback Request plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Callback Request allows Reflected XSS.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00299 Published 2025-03-03 No fix listed CWE-79

TI-2025-19819 CVE-2025-26948 · GHSA-r95f-gcgq-g8xh

WordPress Pie Register Premium plugin <= 3.8.3.2 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in NotFound Pie Register Premium.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00307 Published 2025-02-25 No fix listed CWE-862

TI-2025-19692 CVE-2025-26776 · GHSA-q526-hh66-mj99

WordPress Chaty Pro Plugin <= 3.3.3 - Arbitrary File Upload vulnerability

MEDIUM 50

Unrestricted Upload of File with Dangerous Type vulnerability in NotFound Chaty Pro allows Upload a Web Shell to a Web Server.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00625 Published 2025-02-22 No fix listed CWE-434

TI-2025-16562 CVE-2025-22680 · GHSA-qgcr-pg3g-q595

WordPress Ad Inserter Pro plugin <= 2.7.39 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Ad Inserter Pro allows Reflected XSS.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00248 Published 2025-02-16 No fix listed CWE-79

TI-2024-28985 CVE-2024-43333 · GHSA-mp5r-7qm4-pgc7

WordPress Admin and Site Enhancements (ASE) Pro Plugin <= 7.6.2.1 - Privilege Escalation vulnerability

LOW 35

Incorrect Privilege Assignment vulnerability in NotFound Admin and Site Enhancements (ASE) Pro allows Privilege Escalation.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00441 Published 2025-02-03 No fix listed CWE-266

TI-2025-18498 CVE-2025-24781 · GHSA-fx8w-24qx-p2c5

WordPress WPJobBoard plugin <= 5.10.1 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WPJobBoard allows Reflected XSS.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00308 Published 2025-02-03 No fix listed CWE-79

TI-2025-18461 CVE-2025-24744 · GHSA-ww43-86vr-pw2g

WordPress Bridge Core plugin <= 3.3 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in NotFound Bridge Core.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00244 Published 2025-01-27 No fix listed CWE-862

TI-2025-18370 CVE-2025-24653 · GHSA-4p3m-85w6-62v7

WordPress Admin and Site Enhancements (ASE) Pro Plugin <= 7.6.1.1 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in NotFound Admin and Site Enhancements (ASE) Pro allows Exploiting Incorrectly Configured Access Control Security Levels.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00244 Published 2025-01-27 No fix listed CWE-862

TI-2024-32926 CVE-2024-49333 · GHSA-9v5c-6fwm-w457

WordPress Hero Menu plugin <= 1.16.5 - SQL Injection vulnerability

LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Hero Mega Menu - Responsive WordPress Menu Plugin allows SQL Injection.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00377 Published 2025-01-21 No fix listed CWE-89

TI-2024-32896 CVE-2024-49303 · GHSA-pjq5-5rc2-6pp7

WordPress Hero Menu plugin <= 1.16.5 - SQL Injection vulnerability

LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Hero Mega Menu - Responsive WordPress Menu Plugin allows SQL Injection.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00377 Published 2025-01-21 No fix listed CWE-89

TI-2024-32893 CVE-2024-49300 · GHSA-mhm3-7xrh-62qv

WordPress Hero Menu plugin <= 1.16.5 - Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Hero Mega Menu - Responsive WordPress Menu Plugin allows Reflected XSS.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00293 Published 2025-01-21 No fix listed CWE-79

Vulnerabilities

Filters