Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: seothemes Clear all filters
TI-2025-38420 CVE-2025-62097 · GHSA-7gg3-4c5v-79p3

WordPress SEO Slider plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in seothemes SEO Slider seo-slider allows DOM-Based XSS.This issue affects SEO Slider: from n/a through <= 1.1.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00159 Published 2025-12-31 No fix listed CWE-79
TI-2024-34803 CVE-2024-51899 · GHSA-rmvp-hjvh-xmv3

WordPress Simple Pricing Table plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in seothemes Simple Pricing Table simple-pricing-table allows Stored XSS.This issue affects Simple Pricing Table: from n/…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00296 Published 2024-11-19 No fix listed CWE-79
TI-2024-34524 CVE-2024-51610 · GHSA-h5pp-286r-62gf

WordPress Display Terms Shortcode plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in seothemes Display Terms Shortcode display-terms-shortcode allows Stored XSS.This issue affects Display Terms Shortcode…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00254 Published 2024-11-09 No fix listed CWE-79
TI-2024-01854 CVE-2024-1993 · GHSA-h7vf-2gmx-cr9w

Icon Widget <= 1.3.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode

Priority LOW 29

The Icon Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping on us…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0042 Published 2024-05-02 No fix listed CWE-79
TI-2023-05250 CVE-2023-5707 · GHSA-rw75-prg2-58jc

SEO Slider <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Priority LOW 29

The SEO Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'slider' shortcode and post meta in all versions up to, and including, 1.1.0 due to insufficient input sanitization and ou…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00614 Published 2023-11-03 No fix listed CWE-79