Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: wplakeorg Clear all filters
TI-2026-81129 CVE-2026-109995 · GHSA-678p-m5qh-f4jf

Stored cross-site scripting in Advanced Views plugin for WordPress

Priority LOW 31

The Advanced Views – Display Framework for Gutenberg & Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 3.9.6 due to insufficie…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00236 Published 2026-10-27 No fix listed CWE-79
TI-2026-14416 CVE-2026-17580 · GHSA-wfv8-4fgp-fr6r

Missing authorization in wplakeorg Advanced Views – Display Custom Fields , Posts, CPT…

Priority LOW 30

The Advanced Views – Display Custom Fields (ACF, Pods, MetaBox), Posts, CPT and Woo Products anywhere in Gutenberg, Elementor, Divi, Beaver… plugin for WordPress is vulnerable to Sensitive Information Exposure in all ver…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00554 Published 2026-08-01 No fix listed CWE-862