Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: wordwebsoftware Clear all filters
TI-2025-29208 CVE-2025-46490 · GHSA-5857-r24c-jg46

WordPress Crossword Compiler Puzzles plugin <= 5.2 - Arbitrary File Upload Vulnerability

Priority MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in wordwebsoftware Crossword Compiler Puzzles crossword-compiler-puzzles allows Upload a Web Shell to a Web Server.This issue affects Crossword Compiler Puzzl…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00521 Published 2025-05-23 No fix listed CWE-434
TI-2025-29211 CVE-2025-46493 · GHSA-rmxc-5894-fxhq

WordPress Crossword Compiler Puzzles plugin <= 14.5 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wordwebsoftware Crossword Compiler Puzzles crossword-compiler-puzzles allows Stored XSS.This issue affects Crossword C…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00262 Published 2025-05-23 No fix listed CWE-79