Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: origincode Clear all filters
TI-2025-30675 CVE-2025-48349 · GHSA-2fcc-frh3-hm3c

WordPress Video Gallery – Vimeo and YouTube Gallery plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in origincode Video Gallery – Vimeo and YouTube Gallery smart-grid-gallery allows Stored XSS.This issue affects Video Gal…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00215 Published 2025-08-28 No fix listed CWE-79
TI-2025-21799 CVE-2025-30524 · GHSA-jmwp-wj4g-2wx6

WordPress Product Catalog plugin <= 1.0.4 - SQL Injection vulnerability

Priority MEDIUM 47

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in origincode Product Catalog displayproduct allows SQL Injection.This issue affects Product Catalog: from n/a through <=…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00602 Published 2025-03-26 No fix listed CWE-89