Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Sayful Islam Clear all filters
TI-2025-35846 CVE-2025-57994 · GHSA-5649-2vj2-7475

WordPress Upcoming Events Lists Plugin <= 1.4.0 - Insecure Direct Object References (IDOR) Vulnerability

Priority LOW 24

Authorization Bypass Through User-Controlled Key vulnerability in Sayful Islam Upcoming Events Lists upcoming-events-lists allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Upcomi…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00311 Published 2025-09-22 No fix listed CWE-639
TI-2024-03939 CVE-2024-4234 · GHSA-739r-wh9x-q588

WordPress Filterable Portfolio plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability

Priority LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sayful Islam Filterable Portfolio allows Stored XSS.This issue affects Filterable Portfolio: from n/a through 1.6.4.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00379 Published 2024-04-26 No fix listed CWE-79