Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Web Builder 143 Clear all filters
TI-2025-38410 CVE-2025-62087 · GHSA-qmfx-54pc-298p

WordPress Sticky Notes for WP Dashboard plugin <= 1.2.4 - Broken Access Control vulnerability

Priority LOW 19

Missing Authorization vulnerability in Web Builder 143 Sticky Notes for WP Dashboard wb-sticky-notes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sticky Notes for WP Dashboar…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00209 Published 2025-12-31 No fix listed CWE-862
TI-2024-11794 CVE-2024-12721 · GHSA-5639-7qch-2gcr

Custom Product Tabs For WooCommerce <= 1.2.4 - Authenticated (Shop Manager+) PHP Object Injection

Priority LOW 35

The Custom Product Tabs For WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.2.4 via deserialization of untrusted input from the 'wb_custom_tabs' parameter.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00698 Published 2024-12-21 No fix listed CWE-502