Vulnerabilities

TI-2025-17623 CVE-2025-23856 · GHSA-vqqh-h8qx-j2r4

WordPress Simple Vertical Timeline plugin <= 0.1 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Odyno Simple Vertical Timeline simple-vertical-timeline allows DOM-Based XSS.This issue affects Simple Vertical Timeli…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00383 Published 2025-01-16 No fix listed CWE-79

TI-2024-33980 CVE-2024-50551 · GHSA-73h5-69j6-pq7f

WordPress EndomondoWP plugin <= 0.1.1 - Stored Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Odyno EndomondoWP endomondowp allows Stored XSS.This issue affects EndomondoWP: from n/a through <= 0.1.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00376 Published 2024-11-19 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Simple Vertical Timeline plugin <= 0.1 - Cross Site Scripting (XSS) vulnerability

WordPress EndomondoWP plugin <= 0.1.1 - Stored Cross Site Scripting (XSS) vulnerability