Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: demonisblack Clear all filters
TI-2026-03538 CVE-2026-4083 · GHSA-m758-98cp-w4h7

Cross-site scripting in demonisblack Scoreboard for HTML5 Games Lite

Priority LOW 28

The Scoreboard for HTML5 Games Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'scoreboard' shortcode in all versions up to, and including, 1.2.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00218 Published 2026-03-20 No fix listed CWE-79
TI-2023-21085 CVE-2023-40215 · GHSA-w8vv-fhxr-4vqg

WordPress Demon image annotation Plugin <= 5.1 is vulnerable to SQL Injection

Priority LOW 36

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Demonisblack demon image annotation allows SQL Injection.This issue affects demon image annotation: from n/a through 5…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00681 Published 2023-11-03 No fix listed CWE-89