Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: thom4 Clear all filters
TI-2025-22713 CVE-2025-31550 · GHSA-wg43-7q89-q52r

WordPress WP-LESS plugin <= 1.9.6 - Sensitive Data Exposure vulnerability

Priority LOW 32

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in thom4 WP-LESS wp-less allows Retrieve Embedded Sensitive Data.This issue affects WP-LESS: from n/a through <= 1.9.6.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.0042 Published 2025-04-01 No fix listed CWE-538
TI-2025-17663 CVE-2025-23896 · GHSA-pvf7-f7pm-7w6v

WordPress Mindmeister Shortcode plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in thom4 Mindmeister Shortcode mindmeister-shortcode allows DOM-Based XSS.This issue affects Mindmeister Shortcode: from…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00383 Published 2025-01-16 No fix listed CWE-79