Vulnerabilities

TI-2025-35793 CVE-2025-57940 · GHSA-73gj-4q98-4h7q

WordPress Append extensions on Pages Plugin <= 1.1.2 - Cross Site Scripting (XSS) Vulnerability

LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Suresh Kumar Mukhiya Append extensions on Pages append-extensions-on-pages allows Stored XSS.This issue affects Append…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00296 Published 2025-09-22 No fix listed CWE-79

TI-2023-25919 CVE-2023-47811 · GHSA-2vm7-vmfj-m5rm

WordPress Anywhere Flash Embed Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Suresh KUMAR Mukhiya Anywhere Flash Embed plugin <= 1.0.5 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00416 Published 2023-11-22 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Append extensions on Pages Plugin <= 1.1.2 - Cross Site Scripting (XSS) Vulnerability

WordPress Anywhere Flash Embed Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)