Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: reneade Clear all filters
TI-2023-06667 CVE-2023-7297 · GHSA-7rv8-qgm5-32cr

TwitterPosts <= 1.0.2 - Settings Update via CSRF

Priority MEDIUM 50

The TwitterPosts WordPress plugin through 1.0.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

CVSS 3.1LOW 3.5 Network High privileges User interaction EPSS 0.00201 Published 2025-05-15 No fix listed CWE-352
TI-2024-10027 CVE-2024-10815 · GHSA-72qg-x4rx-vrx3

PostLists <= 2.0.2 - Reflected XSS

Priority MEDIUM 53

The PostLists WordPress plugin through 2.0.2 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers

CVSS 3.1MEDIUM 4.2 Network No auth User interaction EPSS 0.00288 Published 2025-01-09 No fix listed CWE-79