Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: worschtebrot Clear all filters
TI-2026-15911 CVE-2026-19573 · GHSA-c5pg-25hf-rc2w

Affiliate Super Assistent <= 1.10.2 - Unauthenticated Stored Cross-Site Scripting via ‘doCommentShortcode’ function

Priority LOW 38

The Affiliate Super Assistent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘doCommentShortcode’ function in all versions up to, and including, 1.10.2 due to insufficient input sanitization an…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00419 Published 2026-09-01 No fix listed CWE-79
TI-2024-09324 CVE-2024-10048 · GHSA-7h3h-22m6-hvwq

Post Status Notifier Lite and Premium <= 1.11.6 - Reflected Cross-Site Scripting via page

Priority LOW 27

The Post Status Notifier Lite and Premium plugins for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘page’ parameter in all versions up to, and including, 1.11.6 due to insufficient input sanitization…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00317 Published 2024-10-29 No fix listed CWE-79