Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Vendor: Vikas Ratudi Clear all filters
TI-2025-12933 CVE-2025-14153 · GHSA-f3j8-26w9-vx4x

Page Expire Popup/Redirection for WordPress <= 1.0 - Authenticated (Author+) SQL Injection via 'id' Shortcode Attribute

Priority LOW 29

The Page Expire Popup/Redirection for WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the 'id' shortcode attribute in all versions up to, and including, 1.0 due to insufficient escaping on th…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00287 Published 2026-01-06 No fix listed CWE-89
TI-2025-42072 CVE-2025-68551 · GHSA-34rq-45rg-q7m4

WordPress VPSUForm plugin <= 3.2.24 - Sensitive Data Exposure vulnerability

Priority LOW 28

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Vikas Ratudi VPSUForm v-form allows Retrieve Embedded Sensitive Data.This issue affects VPSUForm: from n/a through <= 3.2.24.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0026 Published 2025-12-23 No fix listed CWE-497
TI-2025-42078 CVE-2025-68557 · GHSA-267p-wjxw-gv3x

WordPress Chakra test plugin <= 1.0.1 - Broken Access Control vulnerability

Priority LOW 19

Missing Authorization vulnerability in Vikas Ratudi Chakra test chakra-test allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Chakra test: from n/a through <= 1.0.1.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00181 Published 2025-12-23 No fix listed CWE-862
TI-2025-36601 CVE-2025-58957 · GHSA-853x-x2pj-3g4f

WordPress VPSUForm Plugin <= 3.2.20 - Broken Access Control Vulnerability

Priority LOW 20

Missing Authorization vulnerability in Vikas Ratudi VPSUForm v-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VPSUForm: from n/a through <= 3.2.20.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00241 Published 2025-09-22 No fix listed CWE-862
TI-2025-29002 CVE-2025-46250 · GHSA-gr97-qmmw-4mf6

WordPress VForm plugin <= 3.1.14 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vikas Ratudi VPSUForm v-form allows Stored XSS.This issue affects VPSUForm: from n/a through <= 3.1.14.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00232 Published 2025-04-22 No fix listed CWE-79
TI-2025-18321 CVE-2025-24604 · GHSA-px9r-jcp7-fvj6

WordPress VForm plugin <= 3.0.5 - Broken Access Control vulnerability

Priority LOW 25

Missing Authorization vulnerability in Vikas Ratudi VPSUForm v-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VPSUForm: from n/a through <= 3.0.5.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00475 Published 2025-01-24 No fix listed CWE-862