Vulnerabilities

TI-2025-22626 CVE-2025-31445 · GHSA-hgpg-8wmj-hgr4

WordPress Pages Order plugin <= 1.1.3 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sed Lex Pages Order pages-order allows Reflected XSS.This issue affects Pages Order: from n/a through <= 1.1.3.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00393 Published 2025-04-01 No fix listed CWE-79

TI-2022-20087 CVE-2022-41695 · GHSA-82h5-jxr3-6jxq

WordPress Traffic Manager Plugin <= 1.4.5 is vulnerable to Broken Access Control

LOW 29

Missing Authorization vulnerability in SedLex Traffic Manager.This issue affects Traffic Manager: from n/a through 1.4.5.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00369 Published 2024-01-17 No fix listed CWE-862

TI-2022-20022 CVE-2022-41619 · GHSA-9v4f-6r6q-2957

WordPress Image Zoom Plugin <= 1.8.8 is vulnerable to Broken Access Control

MEDIUM 62

Missing Authorization vulnerability in SedLex Image Zoom.This issue affects Image Zoom: from n/a through 1.8.8.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00364 Published 2024-01-17 No fix listed CWE-862

TI-2022-20659 CVE-2022-42460 · GHSA-c3p8-66jq-vjx5

Access control flaw in SedLex Traffic Manager

LOW 30

Broken Access Control vulnerability leading to Stored Cross-Site Scripting (XSS) in Traffic Manager plugin <= 1.4.5 on WordPress.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00538 Published 2022-11-10 No fix listed CWE-264

TI-2022-17792 CVE-2022-38079 · GHSA-8rp5-857c-f5pv

WordPress Backup Scheduler plugin <= 1.5.13 - Cross-Site Request Forgery (CSRF) vulnerability

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability Backup Scheduler plugin <= 1.5.13 at WordPress.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00434 Published 2022-09-23 No fix listed CWE-352

TI-2022-19083 CVE-2022-40219 · GHSA-h697-5q9g-45h6

WordPress FavIcon Switcher plugin <= 1.2.11 - Cross-Site Request Forgery (CSRF) vulnerability

LOW 24

Cross-Site Request Forgery (CSRF) vulnerability in SedLex FavIcon Switcher plugin <= 1.2.11 at WordPress allows plugin settings change.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00308 Published 2022-09-21 No fix listed CWE-352

TI-2022-06985 CVE-2022-22735 · GHSA-533j-r4h4-5hxg

Simple Quotation <= 1.3.2 - Subscriber+ SQL injection

MEDIUM 41

The Simple Quotation WordPress plugin through 1.3.2 does not have authorisation (and CSRF) checks in various of its AJAX actions and is lacking escaping of user data when using it in SQL statements, allowing any authenti…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01318 Published 2022-03-14 No fix listed CWE-89

TI-2022-06984 CVE-2022-22734 · GHSA-fj9g-qqr2-c949

Simple Quotation <= 1.3.2 - Quote Creation/Edition via CSRF to Stored Cross-Site Scripting

LOW 29

The Simple Quotation WordPress plugin through 1.3.2 does not have CSRF check when creating or editing a quote and does not sanitise and escape Quotes.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.008 Published 2022-03-14 No fix listed CWE-116

Vulnerabilities

Filters