Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: shahinurislam Clear all filters
TI-2026-05499 CVE-2026-6271 · GHSA-7fx9-263h-9gmp

Career Section <= 1.7 - Unauthenticated Arbitrary File Upload

Priority MEDIUM 50

The Career Section plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.7 via the CV upload handler.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00665 Published 2026-05-14 No fix listed CWE-434
TI-2026-01017 CVE-2026-1302 · GHSA-gpmj-jv3p-qfg2

Meta-box GalleryMeta <= 3.0.1 - Authenticated (Editor+) Stored Cross-Site Scripting via Image Caption

Priority LOW 20

The Meta-box GalleryMeta plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00243 Published 2026-01-24 No fix listed CWE-79
TI-2026-00479 CVE-2026-0687 · GHSA-9jx6-rr99-97pv

Meta-box GalleryMeta <= 3.0.1 - Missing Authorization to Authenticated (Author+) Gallery Management

Priority LOW 19

The Meta-box GalleryMeta plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'mb_gallery' custom post type in all versions up to, and including, 3.0.1.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00225 Published 2026-01-24 No fix listed CWE-862