Vulnerabilities

TI-2025-18346 CVE-2025-24629 · GHSA-7786-h8f4-86vp

WordPress Import Excel to Gravity Forms Plugin <= 1.18 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpgear Import Excel to Gravity Forms gf-excel-import allows Reflected XSS.This issue affects Import Excel to Gravity F…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00324 Published 2025-02-03 No fix listed CWE-79

TI-2024-36441 CVE-2024-54353 · GHSA-x5hw-h4f2-565p

WordPress Hack-Info plugin <= 3.17 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

LOW 31

Cross-Site Request Forgery (CSRF) vulnerability in wpgear Hack-Info hack-info allows Stored XSS.This issue affects Hack-Info: from n/a through <= 3.17.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00215 Published 2024-12-16 No fix listed CWE-352

Vulnerabilities

Filters

WordPress Import Excel to Gravity Forms Plugin <= 1.18 - Reflected Cross Site Scripting (XSS) vulnerability

WordPress Hack-Info plugin <= 3.17 - CSRF to Stored Cross Site Scripting (XSS) vulnerability