Vulnerabilities

TI-2025-35817 CVE-2025-57965 · GHSA-qh3r-2r78-r4w5

WordPress WP Proposals Plugin <= 2.3 - Cross Site Scripting (XSS) Vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP CodeUs WP Proposals allows Stored XSS.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00283 Published 2025-09-22 No fix listed CWE-79

TI-2025-36464 CVE-2025-58811 · GHSA-r5qr-hfqr-vp83

WordPress Ultimate Client Dash Plugin <= 4.7 - Cross Site Scripting (XSS) Vulnerability

LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP CodeUs Ultimate Client Dash ulimate-client-dash allows Stored XSS.This issue affects Ultimate Client Dash: from n/a…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00225 Published 2025-09-05 No fix listed CWE-79

TI-2025-31778 CVE-2025-49863 · GHSA-cjg6-5q72-f68x

WordPress Advanced Sermons plugin <= 3.6 - Cross Site Scripting (XSS) Vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP CodeUs Advanced Sermons advanced-sermons allows Stored XSS.This issue affects Advanced Sermons: from n/a through <=…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00192 Published 2025-06-17 No fix listed CWE-79

TI-2025-22974 CVE-2025-31837 · GHSA-57qh-fhxw-gqhr

WordPress WP Proposals plugin <= 2.3 - Cross Site Scripting (XSS) vulnerability

LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Codeus WP Proposals allows Stored XSS.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00376 Published 2025-04-01 No fix listed CWE-79

TI-2024-33890 CVE-2024-50458 · GHSA-vg8g-7jgx-v9fv

WordPress Advanced Sermons plugin <= 3.4 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP CodeUs Advanced Sermons advanced-sermons allows Stored XSS.This issue affects Advanced Sermons: from n/a through <=…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00261 Published 2024-10-28 No fix listed CWE-79

TI-2024-07043 CVE-2024-7599 · GHSA-36pg-hxf8-378v

Advanced Sermons <= 3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

LOW 28

The Advanced Sermons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘sermon_video_embed’ parameter in all versions up to, and including, 3.3 due to insufficient input sanitization and output es…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00316 Published 2024-09-06 No fix listed CWE-79

TI-2024-19695 CVE-2024-29928 · GHSA-w5fj-4qr3-f37v

WordPress Advanced Sermons plugin <= 3.1 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Codeus Advanced Sermons allows Reflected XSS.This issue affects Advanced Sermons: from n/a through 3.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00397 Published 2024-03-27 No fix listed CWE-79

TI-2024-18555 CVE-2024-27952 · GHSA-w3vg-mpgx-xwjc

WordPress Advanced Sermons plugin <= 3.2 - Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Codeus Advanced Sermons allows Reflected XSS.This issue affects Advanced Sermons: from n/a through 3.2.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00397 Published 2024-03-13 No fix listed CWE-79

Vulnerabilities

Filters