Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Vladimir Statsenko Clear all filters
TI-2026-19860 CVE-2026-24621 · GHSA-3hhg-38p8-799x

WordPress Terms descriptions plugin <= 3.4.9 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vladimir Statsenko Terms descriptions terms-descriptions allows DOM-Based XSS.This issue affects Terms descriptions: f…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.0017 Published 2026-01-23 No fix listed CWE-79
TI-2025-38461 CVE-2025-62139 · GHSA-r94r-p2mj-94hp

WordPress Terms descriptions plugin <= 3.4.10 - Sensitive Data Exposure vulnerability

Priority LOW 29

Insertion of Sensitive Information Into Sent Data vulnerability in Vladimir Statsenko Terms descriptions terms-descriptions allows Retrieve Embedded Sensitive Data.This issue affects Terms descriptions: from n/a through…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00228 Published 2025-12-31 No fix listed CWE-201
TI-2024-31654 CVE-2024-47336 · GHSA-x46c-3h5w-7xvx

WordPress Terms Descriptions plugin <= 3.4.7 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vladimir Statsenko Terms descriptions terms-descriptions allows Stored XSS.This issue affects Terms descriptions: from…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00275 Published 2024-10-06 No fix listed CWE-79