Vulnerabilities

TI-2025-17632 CVE-2025-23865 · GHSA-3cjv-4652-42rh

WordPress Winning Portfolio plugin <= 1.1 - Stored Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pressfore Winning Portfolio winning-portfolio allows Stored XSS.This issue affects Winning Portfolio: from n/a through…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00383 Published 2025-01-16 No fix listed CWE-79

TI-2024-01343 CVE-2024-1438 · GHSA-f6pr-3mcc-9v92

WordPress Rolo Slider plugin <= 1.0.9 - Broken Access Control vulnerability

LOW 36

Missing Authorization vulnerability in PressFore Rolo Slider.This issue affects Rolo Slider: from n/a through 1.0.9.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00333 Published 2024-05-08 No fix listed CWE-862

Vulnerabilities

Filters

WordPress Winning Portfolio plugin <= 1.1 - Stored Cross Site Scripting (XSS) vulnerability

WordPress Rolo Slider plugin <= 1.0.9 - Broken Access Control vulnerability