Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Sabuj Kundu Clear all filters
TI-2025-40626 CVE-2025-66101 · GHSA-4x53-8wvc-gj2p

WordPress CBX Bookmark & Favorite plugin <= 2.0.1 - Broken Access Control vulnerability

Priority LOW 19

Missing Authorization vulnerability in Sabuj Kundu CBX Bookmark & Favorite cbxwpbookmark allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CBX Bookmark & Favorite: from n/a throug…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00194 Published 2025-11-21 No fix listed CWE-862
TI-2025-30166 CVE-2025-47669 · GHSA-37jg-g7cq-cj49

WordPress CBX Map for Google Map & OpenStreetMap plugin <= 1.1.12 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sabuj Kundu CBX Map for Google Map & OpenStreetMap cbxgooglemap allows DOM-Based XSS.This issue affects CBX Map for Go…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00216 Published 2025-05-07 No fix listed CWE-79
TI-2025-22775 CVE-2025-31612 · GHSA-3q3v-vh74-59jw

WordPress CBX Poll plugin <= 2.0.4 - PHP Object Injection vulnerability

Priority MEDIUM 50

Deserialization of Untrusted Data vulnerability in Sabuj Kundu CBX Poll cbxpoll allows Object Injection.This issue affects CBX Poll: from n/a through <= 2.0.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0073 Published 2025-04-01 No fix listed CWE-502
TI-2025-17389 CVE-2025-23622 · GHSA-7wfq-gffp-w2c9

WordPress CBX Accounting & Bookkeeping plugin <= 1.3.14 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sabuj Kundu CBX Accounting & Bookkeeping cbxwpsimpleaccounting allows Reflected XSS.This issue affects CBX Accounting…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00238 Published 2025-01-24 No fix listed CWE-79