Vulnerabilities

TI-2025-33514 CVE-2025-53577 · GHSA-55hc-5m33-3ph3

WordPress Global DNS Plugin <= 3.1.0 - Remote Code Execution (RCE) Vulnerability

MEDIUM 49

Improper Control of Generation of Code ('Code Injection') vulnerability in thehp Global DNS global-dns allows Remote Code Inclusion.This issue affects Global DNS: from n/a through <= 3.1.0.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00388 Published 2025-08-20 No fix listed CWE-94

TI-2024-36307 CVE-2024-54218 · GHSA-chqw-mw32-x7wh

WordPress AIO Contact plugin <= 2.8.1 - Unauthenticated Plugin Settings Change vulnerability

LOW 35

Missing Authorization vulnerability in thehp AIO Contact aio-contact.This issue affects AIO Contact: from n/a through <= 2.8.1.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00317 Published 2024-12-09 No fix listed CWE-862

TI-2024-36308 CVE-2024-54219 · GHSA-wcrv-pqj9-gq8r

WordPress AIO Contact plugin <= 2.8.1 - Unauthenticated Site-Wide Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in thehp AIO Contact aio-contact.This issue affects AIO Contact: from n/a through <= 2.8.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00369 Published 2024-12-09 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Global DNS Plugin <= 3.1.0 - Remote Code Execution (RCE) Vulnerability

WordPress AIO Contact plugin <= 2.8.1 - Unauthenticated Plugin Settings Change vulnerability

WordPress AIO Contact plugin <= 2.8.1 - Unauthenticated Site-Wide Cross Site Scripting (XSS) vulnerability