Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

13 records

Vendor: webvitaly Clear all filters
TI-2026-07920 CVE-2026-9008 · GHSA-9p43-w7wv-jv6w

Missing authorization in webvitaly Page-list

Priority LOW 19

The Page-list plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 6.2.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00224 Published 2026-06-06 No fix listed CWE-862
TI-2025-38433 CVE-2025-62111 · GHSA-xpx9-9jmc-8j4w

WordPress Extra Shortcodes plugin <= 2.2 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webvitaly Extra Shortcodes extra-shortcodes allows Stored XSS.This issue affects Extra Shortcodes: from n/a through <=…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00154 Published 2025-12-31 No fix listed CWE-79
TI-2025-33412 CVE-2025-53467 · GHSA-6p7g-4ppf-75jj

WordPress Login-Logout Plugin <= 3.8 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webvitaly Login-Logout login-logout allows Stored XSS.This issue affects Login-Logout: from n/a through <= 3.8.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00296 Published 2025-09-22 No fix listed CWE-79
TI-2025-35882 CVE-2025-58030 · GHSA-mhpp-4fhc-5c7x

WordPress Page-list Plugin <= 5.8 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webvitaly Page-list page-list allows Stored XSS.This issue affects Page-list: from n/a through <= 5.8.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00215 Published 2025-09-22 No fix listed CWE-79
TI-2025-36034 CVE-2025-58229 · GHSA-qfcm-g9w4-93rc

WordPress Sitekit Plugin <= 2.0 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webvitaly Sitekit sitekit allows Stored XSS.This issue affects Sitekit: from n/a through <= 2.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00215 Published 2025-09-22 No fix listed CWE-79
TI-2025-36485 CVE-2025-58832 · GHSA-qc8m-r2hj-q6pw

WordPress Search by Google Plugin <= 1.9 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webvitaly Search by Google search-google allows Stored XSS.This issue affects Search by Google: from n/a through <= 1.…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00225 Published 2025-09-05 No fix listed CWE-79
TI-2025-31960 CVE-2025-50047 · GHSA-569g-rv68-5hcv

WordPress Sitekit plugin <= 1.9 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webvitaly Sitekit sitekit allows Stored XSS.This issue affects Sitekit: from n/a through <= 1.9.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00236 Published 2025-06-20 No fix listed CWE-79
TI-2025-22046 CVE-2025-30776 · GHSA-v6pj-45gc-fg24

WordPress Sitekit plugin <= 1.8 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webvitaly Sitekit sitekit allows Stored XSS.This issue affects Sitekit: from n/a through <= 1.8.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00368 Published 2025-03-27 No fix listed CWE-79
TI-2024-34800 CVE-2024-51896 · GHSA-9rhr-hcff-89rc

WordPress Magic Slider plugin <= 1.3 - Stored Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webvitaly Magic Slider magic-slider allows Stored XSS.This issue affects Magic Slider: from n/a through <= 1.3.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00328 Published 2024-11-19 No fix listed CWE-79
TI-2024-31700 CVE-2024-47382 · GHSA-vr32-xvc3-5gfw

WordPress Page-list plugin <= 5.6 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webvitaly Page-list page-list allows Stored XSS.This issue affects Page-list: from n/a through <= 5.6.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0026 Published 2024-10-05 No fix listed CWE-79
TI-2023-06249 CVE-2023-6844 · GHSA-qr93-4cq6-4587

iframe <= 5.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode

Priority LOW 23

The iframe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to and including 5.0 due to insufficient input sanitization and output escaping on user suppli…

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00401 Published 2024-05-23 No fix listed CWE-79
TI-2024-23092 CVE-2024-34805 · GHSA-vh7f-6ffj-5pw9

WordPress iframe plugin <= 5.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Webvitaly iFrame allows Stored XSS.This issue affects iFrame: from n/a through 5.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0026 Published 2024-05-16 No fix listed CWE-79
TI-2024-19285 CVE-2024-29111 · GHSA-f5cm-q735-qhfg

WordPress Sitekit plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Webvitaly Sitekit allows Stored XSS.This issue affects Sitekit: from n/a through 1.6.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0034 Published 2024-03-19 No fix listed CWE-79