Vulnerabilities

TI-2025-17287 CVE-2025-23520 · GHSA-jj2v-p635-c948

WordPress Heartland Management Terminal plugin <= 1.3.0 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 33

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SecureSubmit Heartland Management Terminal allows Reflected XSS.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0037 Published 2025-03-03 No fix listed CWE-79

TI-2024-37239 CVE-2024-56270 · GHSA-j2c7-hmc5-6hrq

WordPress WP SecureSubmit plugin <= 1.5.20 - Sensitive Data Exposure vulnerability

LOW 30

Missing Authorization vulnerability in SecureSubmit WP SecureSubmit securesubmit allows Retrieve Embedded Sensitive Data.This issue affects WP SecureSubmit: from n/a through <= 1.5.20.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00359 Published 2025-01-07 No fix listed CWE-862

TI-2024-37240 CVE-2024-56271 · GHSA-h5pw-6wvq-g597

WordPress WP SecureSubmit plugin <= 1.5.20 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in SecureSubmit WP SecureSubmit securesubmit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP SecureSubmit: from n/a through <= 1.5.20.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0033 Published 2025-01-07 No fix listed CWE-862

Vulnerabilities

Filters

WordPress Heartland Management Terminal plugin <= 1.3.0 - Reflected Cross Site Scripting (XSS) vulnerability

WordPress WP SecureSubmit plugin <= 1.5.20 - Sensitive Data Exposure vulnerability

WordPress WP SecureSubmit plugin <= 1.5.20 - Broken Access Control vulnerability