Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Vernon Systems Limited Clear all filters
TI-2025-41539 CVE-2025-67930 · GHSA-3mr8-75r8-g586

WordPress eHive Search plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vernon Systems Limited eHive Search ehive-search allows Reflected XSS.This issue affects eHive Search: from n/a throug…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00219 Published 2026-01-08 No fix listed CWE-79
TI-2024-12701 CVE-2024-13662 · GHSA-whf9-jf4p-qw7f

eHive Objects Image Grid <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 28

The eHive Objects Image Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ehive_objects_image_grid' shortcode in all versions up to, and including, 2.4.1 due to insufficient input s…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0034 Published 2025-01-31 No fix listed CWE-79