Vulnerabilities

TI-2025-37515 CVE-2025-60149 · GHSA-cgf7-528c-v2j6

WordPress Notely plugin <= 1.8.0 - Cross Site Scripting (XSS) vulnerability

LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rocket Apps Notely notely allows Stored XSS.This issue affects Notely: from n/a through <= 1.8.0.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00225 Published 2025-09-26 No fix listed CWE-79

TI-2025-26092 CVE-2025-39350 · GHSA-6r4g-8vrx-4gmq

WordPress wProject theme < 5.8.0 - Unauthenticated Post/Comment/Attachment Modification/Deletion vulnerability

MEDIUM 42

Missing Authorization vulnerability in Rocket Apps wProject.This issue affects wProject: from n/a before 5.8.0.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.0033 Published 2025-05-19 Fixed in 5.8.0 CWE-862

TI-2025-26107 CVE-2025-39365 · GHSA-258r-rc8h-56rv

WordPress wProject theme < 5.8.0 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rocket Apps wProject allows Reflected XSS.This issue affects wProject: from n/a before 5.8.0.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00233 Published 2025-05-19 Fixed in 5.8.0 CWE-79

TI-2025-26108 CVE-2025-39366 · GHSA-crp9-8xr4-fg7p

WordPress wProject theme < 5.8.0 - Subscriber+ Privilege Escalation vulnerability

MEDIUM 40

Incorrect Privilege Assignment vulnerability in Rocket Apps wProject.This issue affects wProject: from n/a before 5.8.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00359 Published 2025-05-19 Fixed in 5.8.0 CWE-266

TI-2022-23516 CVE-2022-47439 · GHSA-fmw5-f5r2-wh82

WordPress Open Graphite Plugin <= 1.6.0 is vulnerable to Cross Site Scripting (XSS)