Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: Pierre Lannoy Clear all filters
TI-2026-02431 CVE-2026-2831 · GHSA-xw84-4gx9-vm4h

MailArchiver <= 4.5.0 - Authenticated (Admininistrator+) SQL Injection via 'logid' Parameter

Priority LOW 22

The MailArchiver plugin for WordPress is vulnerable to SQL Injection via the ‘logid’ parameter in all versions up to, and including, 4.5.0 due to insufficient escaping on the user supplied parameter and lack of sufficien…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00299 Published 2026-02-27 No fix listed CWE-89
TI-2025-08410 CVE-2025-9172 · GHSA-ghqf-9cr9-jv8g

Vibes <= 2.2.0 - Unauthenticated SQL Injection via `resource` Parameter

Priority LOW 39

The Vibes plugin for WordPress is vulnerable to time-based SQL Injection via the ‘resource’ parameter in all versions up to, and including, 2.2.0 due to insufficient escaping on the user supplied parameter and lack of su…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00433 Published 2025-08-26 No fix listed CWE-89
TI-2025-35744 CVE-2025-57890 · GHSA-9mvp-6c52-jq3m

WordPress Sessions Plugin <= 3.2.0 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pierre Lannoy Sessions sessions allows Stored XSS.This issue affects Sessions: from n/a through <= 3.2.0.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00182 Published 2025-08-22 No fix listed CWE-79
TI-2025-22096 CVE-2025-30826 · GHSA-gp5w-jxvw-43ff

WordPress IP Locator plugin <= 4.1.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pierre Lannoy IP Locator ip-locator allows DOM-Based XSS.This issue affects IP Locator: from n/a through <= 4.1.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00368 Published 2025-03-27 No fix listed CWE-79
TI-2024-37046 CVE-2024-56010 · GHSA-59qv-jj6f-7pqh

WordPress Device Detector Plugin <= 4.2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pierre Lannoy Device Detector device-detector allows Reflected XSS.This issue affects Device Detector: from n/a throug…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0027 Published 2024-12-18 No fix listed CWE-79
TI-2024-19991 CVE-2024-30245 · GHSA-cq7w-x535-g68q

WordPress DecaLog plugin <= 3.9.0 - SQL Injection vulnerability

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pierre Lannoy DecaLog decalog.This issue affects DecaLog: from n/a through <= 3.9.0.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00612 Published 2024-03-28 No fix listed CWE-89