Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Sajjadhsagor Clear all filters
TI-2024-08745 CVE-2024-9425 · GHSA-v66r-c2mf-983h

Cross-site scripting in sajjad67 Advanced Category and Custom Taxonomy Image

Priority LOW 28

The Advanced Category and Custom Taxonomy Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ad_tax_image shortcode in all versions up to, and including, 1.0.9 due to insufficient in…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00321 Published 2024-10-18 No fix listed CWE-79
TI-2023-25698 CVE-2023-47527 · GHSA-rw43-gq3v-mchp

WordPress WP Edit Username Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sajjad Hossain Sagor WP Edit Username allows Stored XSS.This issue affects WP Edit Username: from n/a through 1.0.5.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00291 Published 2023-12-21 No fix listed CWE-79