Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: SilkyPress Clear all filters
TI-2025-41296 CVE-2025-67542 · GHSA-93x9-7c94-7879

WordPress Multi-Step Checkout for WooCommerce plugin <= 2.33 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SilkyPress Multi-Step Checkout for WooCommerce wp-multi-step-checkout allows DOM-Based XSS.This issue affects Multi-St…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00196 Published 2025-12-09 No fix listed CWE-79
TI-2021-06737 CVE-2021-24447 · GHSA-vj2g-57f8-3334

WP Image Zoom < 1.47 - Local File Inclusion

Priority LOW 27

The WP Image Zoom WordPress plugin before 1.47 did not validate its tab parameter before using it in the include_once() function, leading to a local file inclusion issue in the admin dashboard

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01375 Published 2021-07-19 Fixed in 1.47 CWE-22
TI-2017-01567 CVE-2017-2285 · GHSA-ccv8-jvrf-2cp3

Cross-site scripting in SilkyPress Simple Custom CSS and JS

Priority LOW 30

Cross-site scripting vulnerability in Simple Custom CSS and JS prior to version 3.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01466 Published 2017-08-02 No fix listed CWE-79