Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: rico-macchi Clear all filters
TI-2025-09341 CVE-2025-10175 · GHSA-38j6-wgw2-r5hw

WP Links Page <= 4.9.6 - Authenticated (Subscriber+) SQL Injection

Priority LOW 29

The WP Links Page plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 4.9.6 due to insufficient escaping on the user supplied parameter and lack of sufficient…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00394 Published 2025-10-11 No fix listed CWE-89
TI-2025-22268 CVE-2025-30998 · GHSA-8wq6-xrv3-8vvx

WordPress WP Links Page plugin <= 4.9.6 - SQL Injection vulnerability

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Rico Macchi WP Links Page wp-links-page allows SQL Injection.This issue affects WP Links Page: from n/a through <= 4.9…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00292 Published 2025-08-14 No fix listed CWE-89
TI-2025-23622 CVE-2025-32557 · GHSA-fg6h-m78g-fqg5

WordPress WP Featured Screenshot Plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rico Macchi WP Featured Screenshot wp-featured-screenshot allows Reflected XSS.This issue affects WP Featured Screensh…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00311 Published 2025-04-17 No fix listed CWE-79
TI-2024-05998 CVE-2024-6465 · GHSA-w669-m4rx-rffh

WP Links Page <= 4.9.5 - Missing Authorization to Authenticated (Subscriber+) Limited Image Update

Priority LOW 20

The WP Links Page plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wplf_ajax_update_screenshots' function in all versions up to, and including, 4.9.5.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00385 Published 2024-07-13 No fix listed CWE-862
TI-2024-03417 CVE-2024-3663 · GHSA-74c3-rgpv-v3qr

WP Scraper <= 5.7 - Missing Authorization to Arbitrary Page/Post Creation

Priority LOW 20

The WP Scraper plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wp_scraper_multi_scrape_action() function in all versions up to, and including, 5.7.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00343 Published 2024-05-22 No fix listed CWE-862