Vulnerabilities

TI-2025-35780 CVE-2025-57927 · GHSA-h6wf-j38w-x3h2

WordPress Dashboard Notepad Plugin <= 1.42 - Cross Site Request Forgery (CSRF) Vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Stephanie Leary Dashboard Notepad dashboard-notepad allows Cross Site Request Forgery.This issue affects Dashboard Notepad: from n/a through <= 1.42.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00159 Published 2025-09-22 No fix listed CWE-352

TI-2024-21185 CVE-2024-32108 · GHSA-8gjp-676p-q8hj

WordPress Convert Post Types plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Stephanie Leary Convert Post Types.This issue affects Convert Post Types: from n/a through 1.4.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.002 Published 2024-04-11 No fix listed CWE-352

TI-2024-20501 CVE-2024-31112 · GHSA-5r72-8qwv-mccg

WordPress Convert Post Types plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stephanie Leary Convert Post Types allows Reflected XSS.This issue affects Convert Post Types: from n/a through 1.4.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00354 Published 2024-03-31 No fix listed CWE-79

TI-2023-24542 CVE-2023-45768 · GHSA-rg52-86vx-997f

WordPress Next Page Plugin <= 1.5.2 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Stephanie Leary Next Page plugin <= 1.5.2 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00499 Published 2023-10-24 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Dashboard Notepad Plugin <= 1.42 - Cross Site Request Forgery (CSRF) Vulnerability

WordPress Convert Post Types plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability

WordPress Convert Post Types plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability

WordPress Next Page Plugin <= 1.5.2 is vulnerable to Cross Site Scripting (XSS)