Vulnerabilities

TI-2025-11822 CVE-2025-12904 · GHSA-f87p-wjm9-4rp5

SNORDIAN's H5PxAPIkatchu <= 0.4.17 - Unauthenticated Stored Cross-Site Scripting via insert_data

LOW 37

The SNORDIAN's H5PxAPIkatchu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'insert_data' AJAX endpoint in all versions up to, and including, 0.4.17 due to insufficient input sanitization and o…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00305 Published 2025-11-14 No fix listed CWE-79

TI-2025-22091 CVE-2025-30821 · GHSA-qrww-fvjf-83pv

WordPress SNORDIAN's H5PxAPIkatchu plugin <= 0.4.14 - Broken Access Control vulnerability

LOW 31

Missing Authorization vulnerability in otacke SNORDIAN's H5PxAPIkatchu h5pxapikatchu allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects SNORDIAN's H5PxAPIkatchu: from n/a through <= 0.4.14…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0059 Published 2025-03-27 No fix listed CWE-862

Vulnerabilities

Filters

SNORDIAN's H5PxAPIkatchu <= 0.4.17 - Unauthenticated Stored Cross-Site Scripting via insert_data

WordPress SNORDIAN's H5PxAPIkatchu plugin <= 0.4.14 - Broken Access Control vulnerability