Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Rachel Cherry Clear all filters
TI-2025-23602 CVE-2025-32537 · GHSA-7mm3-xgvg-65xm

WordPress Lock Your Updates Plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 32

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rachel Cherry Lock Your Updates lock-your-updates allows Reflected XSS.This issue affects Lock Your Updates: from n/a…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00435 Published 2025-04-11 No fix listed CWE-79
TI-2025-21898 CVE-2025-30623 · GHSA-w7jh-4v5p-jpjq

WordPress wA11y – The Web Accessibility Toolbox plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rachel Cherry wA11y – The Web Accessibility Toolbox wa11y allows Stored XSS.This issue affects wA11y – The Web Accessi…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00287 Published 2025-03-24 No fix listed CWE-79
TI-2025-18838 CVE-2025-25169 · GHSA-w43w-pw8h-qxgc

WordPress Authors Autocomplete Meta Box plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rachel Cherry Authors Autocomplete Meta Box authors-autocomplete-meta-box allows Reflected XSS.This issue affects Auth…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00393 Published 2025-03-03 No fix listed CWE-79