Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: rtowebsites Clear all filters
TI-2025-12373 CVE-2025-13543 · GHSA-c87j-2j6h-48gh

PostGallery <= 1.12.5 - Authenticated (Subscriber+) Arbitrary File Upload

Priority MEDIUM 42

The PostGallery plugin for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in the 'PostGalleryUploader' class functions in all versions up to, and including, 1.12.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00809 Published 2025-12-04 No fix listed CWE-434
TI-2025-26206 CVE-2025-39464 · GHSA-rxcr-p59f-9j2p

WordPress AdminQuickbar plugin <= 1.9.1 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rtowebsites AdminQuickbar adminquickbar allows Reflected XSS.This issue affects AdminQuickbar: from n/a through <= 1.9…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00293 Published 2025-04-17 No fix listed CWE-79
TI-2025-16525 CVE-2025-22642 · GHSA-fx5q-fpjj-9r8j

WordPress Dynamic Conditions plugin <= 1.7.4 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rtowebsites Dynamic Conditions dynamicconditions allows Stored XSS.This issue affects Dynamic Conditions: from n/a thr…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00263 Published 2025-02-04 No fix listed CWE-79
TI-2025-16252 CVE-2025-22348 · GHSA-mwv9-m4p2-2cc4

WordPress DynamicTags plugin <= 1.4.0 - SQL Injection vulnerability

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in rtowebsites DynamicTags dynamictags allows Blind SQL Injection.This issue affects DynamicTags: from n/a through <= 1.4…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00377 Published 2025-01-07 No fix listed CWE-89