Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Productive Minds Clear all filters
TI-2025-07682 CVE-2025-8394 · GHSA-2j72-pp8c-5p7c

Cross-site scripting in Productive Style – Optimisations & Content Publishing Support

Priority LOW 28

The Productive Style plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's display_productive_breadcrumb shortcode in all versions up to, and including, 1.1.23 due to insufficient input sanit…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00244 Published 2025-09-17 No fix listed CWE-79
TI-2025-30154 CVE-2025-47657 · GHSA-79q2-r662-3wfc

WordPress Productive Commerce plugin <= 1.1.40 - SQL Injection vulnerability

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Productive Minds Productive Commerce productive-commerce allows SQL Injection.This issue affects Productive Commerce:…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00364 Published 2025-05-07 No fix listed CWE-89