Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Scott Taylor Clear all filters
TI-2025-26176 CVE-2025-39434 · GHSA-23pm-fv72-xcr5

WordPress Avatar plugin <= 0.1.4 - Insecure Direct Object References (IDOR) vulnerability

Priority LOW 20

Authorization Bypass Through User-Controlled Key vulnerability in Scott Taylor Avatar avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Avatar: from n/a through <= 0.1.4.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00342 Published 2025-04-17 No fix listed CWE-639
TI-2025-20816 CVE-2025-28873 · GHSA-hph8-p5j3-prh4

WordPress Shuffle plugin <= 0.5 - SQL Injection vulnerability

Priority MEDIUM 40

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Scott Taylor Shuffle shuffle allows Blind SQL Injection.This issue affects Shuffle: from n/a through <= 0.5.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00563 Published 2025-03-26 No fix listed CWE-89