Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Vendor: Stiofan Clear all filters
TI-2026-81970 CVE-2026-115609 · GHSA-3j88-g9q5-5g9p

Stored cross-site scripting in WordPress GetPaid plugin

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stiofan GetPaid invoicing allows Stored XSS.This issue affects GetPaid: from n/a through 2.8.62.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00146 Published 2026-10-28 No fix listed CWE-79
TI-2026-69925 CVE-2026-94641 · GHSA-v2jg-gf9r-jh9m

Reflected cross-site scripting in WordPress UsersWP plugin

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stiofan UsersWP userswp allows Reflected XSS.This issue affects UsersWP: from n/a through 1.2.73.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0021 Published 2026-10-09 No fix listed CWE-79
TI-2026-69924 CVE-2026-94632 · GHSA-vmh7-5wmw-8pj9

Cross-site scripting in WordPress BlockStrap Page Builder plugin

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stiofan BlockStrap Page Builder - Bootstrap Blocks blockstrap-page-builder-blocks allows Reflected XSS.This issue affe…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00175 Published 2026-10-09 No fix listed CWE-79
TI-2026-67833 CVE-2026-103086 · GHSA-vh4f-892j-85xg

Missing authorization in UsersWP WordPress plugin

Priority LOW 28

Missing Authorization vulnerability in Stiofan UsersWP userswp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UsersWP: from n/a through 1.2.74.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00228 Published 2026-10-05 No fix listed CWE-862
TI-2025-40597 CVE-2025-66072 · GHSA-x83m-pwr6-93c3

WordPress UsersWP plugin <= 1.2.47 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in Stiofan UsersWP userswp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UsersWP: from n/a through <= 1.2.47.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00265 Published 2025-11-21 No fix listed CWE-862
TI-2025-22221 CVE-2025-30951 · GHSA-pmwx-4xrc-36xv

WordPress BlockStrap Page Builder - Bootstrap Blocks plugin <= 0.1.36 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stiofan BlockStrap Page Builder - Bootstrap Blocks blockstrap-page-builder-blocks allows Stored XSS.This issue affects…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00269 Published 2025-06-06 No fix listed CWE-79
TI-2024-37225 CVE-2024-56255 · GHSA-9562-r8v7-4w2h

WordPress AyeCode Connect plugin <= 1.3.8 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in Stiofan AyeCode Connect ayecode-connect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AyeCode Connect: from n/a through <= 1.3.8.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00294 Published 2025-01-02 No fix listed CWE-862