Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: Aleksandar Urošević Clear all filters
TI-2025-18438 CVE-2025-24721 · GHSA-fhgg-6h6w-vm63

WordPress Easy YouTube Gallery plugin <= 1.0.4 - Stored Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aleksandar Urošević Easy YouTube Gallery easy-youtube-gallery allows Stored XSS.This issue affects Easy YouTube Galler…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00311 Published 2025-01-24 No fix listed CWE-79
TI-2023-12336 CVE-2023-27626 · GHSA-43f2-7v5v-7h6m

WordPress Stock Ticker plugin <= 3.23.0 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in Aleksandar Urošević Stock Ticker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stock Ticker: from n/a through 3.23.0.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00398 Published 2024-12-09 No fix listed CWE-862
TI-2024-05905 CVE-2024-6363 · GHSA-rp9c-j467-r9xv

Stock Ticker <= 3.24.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via stock_ticker Shortcode

Priority LOW 28

The Stock Ticker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's stock_ticker shortcode in all versions up to, and including, 3.24.4 due to insufficient input sanitization and output es…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00322 Published 2024-06-29 No fix listed CWE-79
TI-2023-28193 CVE-2023-51541 · GHSA-8987-77qq-2wwv

WordPress Stock Ticker Plugin <= 3.23.4 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aleksandar Urošević Stock Ticker allows Stored XSS.This issue affects Stock Ticker: from n/a through 3.23.4.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00328 Published 2023-12-29 No fix listed CWE-79
TI-2022-22331 CVE-2022-45365 · GHSA-2ff7-p4h3-cfp8

WordPress Stock Ticker Plugin <= 3.23.2 is vulnerable to Cross Site Scripting (XSS)

Priority MEDIUM 62

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aleksandar Urošević Stock Ticker allows Reflected XSS.This issue affects Stock Ticker: from n/a through 3.23.2.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.49172 Published 2023-12-14 No fix listed CWE-79