Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: oooorgle Clear all filters
TI-2025-22056 CVE-2025-30786 · GHSA-333p-49h6-q8x3

WordPress Quotes llama plugin <= 3.1.0 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in oooorgle Quotes llama quotes-llama allows DOM-Based XSS.This issue affects Quotes llama: from n/a through <= 3.1.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00346 Published 2025-03-27 No fix listed CWE-79
TI-2025-20154 CVE-2025-27307 · GHSA-f872-rr6m-x9r7

WordPress Quotes llama plugin <= 3.0.1 - Stored Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in oooorgle Quotes llama quotes-llama allows Reflected XSS.This issue affects Quotes llama: from n/a through <= 3.0.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00271 Published 2025-02-24 No fix listed CWE-79
TI-2024-10080 CVE-2024-10874 · GHSA-5m7h-p4qx-p95h

Quotes llama <= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 29

The Quotes llama plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'quotes-llama' shortcode in all versions up to, and including, 3.0.0 due to insufficient input sanitization and output e…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00436 Published 2024-11-23 No fix listed CWE-79