Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: robfelty Clear all filters
TI-2026-24894 CVE-2026-32366 · GHSA-2jrw-9994-7wpr

WordPress Collapsing Categories plugin <= 3.0.9 - SQL Injection vulnerability

Priority LOW 36

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in robfelty Collapsing Categories collapsing-categories allows Blind SQL Injection.This issue affects Collapsing Categori…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00237 Published 2026-03-13 No fix listed CWE-89
TI-2026-24893 CVE-2026-32365 · GHSA-fxch-jw5f-5crc

WordPress Collapsing Archives plugin <= 3.0.7 - SQL Injection vulnerability

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in robfelty Collapsing Archives collapsing-archives allows Blind SQL Injection.This issue affects Collapsing Archives: fr…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00289 Published 2026-03-13 No fix listed CWE-89
TI-2024-11156 CVE-2024-12025 · GHSA-5954-58x3-phm4

Collapsing Categories <= 3.0.8 - Unauthenticated SQL Injection

Priority MEDIUM 44

The Collapsing Categories plugin for WordPress is vulnerable to SQL Injection via the 'taxonomy' parameter of the /wp-json/collapsing-categories/v1/get REST API in all versions up to, and including, 3.0.8 due to insuffic…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02687 Published 2024-12-18 No fix listed CWE-89
TI-2024-29523 CVE-2024-43934 · GHSA-62gg-j5pm-8r49

WordPress Collapsing Archives plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Robert Felty Collapsing Archives allows Stored XSS.This issue affects Collapsing Archives: from n/a through 3.0…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0026 Published 2024-08-29 No fix listed CWE-79