Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Vinoj Cardoza Clear all filters
TI-2022-16749 CVE-2022-36417 · GHSA-v5rw-hwp6-gf94

Cross-site request forgery in Vinoj Cardoza 3D Tag Cloud

Priority LOW 27

Multiple Stored Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability in 3D Tag Cloud plugin <= 3.8 at WordPress.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00292 Published 2022-09-23 No fix listed CWE-352
TI-2012-04883 CVE-2012-5853 · GHSA-43f2-6v99-hw83

SQL injection vulnerability in the "the_search_function" function in…

Priority LOW 37

SQL injection vulnerability in the "the_search_function" function in cardoza_ajax_search.php in the AJAX Post Search (cardoza-ajax-search) plugin before 1.3 for WordPress allows remote attackers to execute arbitrary SQL…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02242 Published 2015-01-08 No fix listed CWE-89