Vulnerabilities

TI-2024-07446 CVE-2024-8032 · GHSA-w7g4-p5vp-3m77

Smooth Gallery Replacement <= 1.0 - CSRF to Stored XSS

MEDIUM 60

The Smooth Gallery Replacement WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS pay…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00169 Published 2025-05-15 No fix listed CWE-352

TI-2023-22092 CVE-2023-41667 · GHSA-4g52-qrp4-6j69

WordPress WP-dTree Plugin <= 4.4.5 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Ulf Benjaminsson WP-dTree plugin <= 4.4.5 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0025 Published 2023-10-09 No fix listed CWE-352

TI-2023-22087 CVE-2023-41662 · GHSA-wcfx-7h46-pfrp

WordPress WP-dTree Plugin <= 4.4.5 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Ulf Benjaminsson WP-dTree plugin <= 4.4.5 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-09-29 No fix listed CWE-79

TI-2022-23500 CVE-2022-47423 · GHSA-vv79-99m7-2pg7

WordPress WP-dTree Plugin <= 4.4.5 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ulf Benjaminsson WP-dTree plugin <= 4.4.5 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00392 Published 2023-05-10 No fix listed CWE-79

Vulnerabilities

Filters

Smooth Gallery Replacement <= 1.0 - CSRF to Stored XSS

WordPress WP-dTree Plugin <= 4.4.5 is vulnerable to Cross Site Request Forgery (CSRF)

WordPress WP-dTree Plugin <= 4.4.5 is vulnerable to Cross Site Scripting (XSS)

WordPress WP-dTree Plugin <= 4.4.5 is vulnerable to Cross Site Scripting (XSS)