Vulnerabilities

TI-2026-19828 CVE-2026-24588 · GHSA-rrrx-rjcc-vx6w

WordPress Smart Product Viewer plugin <= 1.5.4 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in topdevs Smart Product Viewer smart-product-viewer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart Product Viewer: from n/a through <…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00261 Published 2026-01-23 No fix listed CWE-862

TI-2024-03340 CVE-2024-3583

Simple Like Page Plugin <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

LOW 28

The Simple Like Page Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output es…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00273 Published 2024-05-30 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Smart Product Viewer plugin <= 1.5.4 - Broken Access Control vulnerability

Simple Like Page Plugin <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode