Vulnerabilities

TI-2026-71554 CVE-2026-15399 · GHSA-rmvr-f63m-c59m

SQL injection in Animated Number Counters WordPress plugin

LOW 22

The Animated Number Counters plugin for WordPress is vulnerable to generic SQL Injection via the 'counterid' parameter in all versions up to, and including, 3.0 due to insufficient escaping on the user supplied parameter…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00355 Published 2026-10-13 No fix listed CWE-89

TI-2026-10432 CVE-2026-12114 · GHSA-xwjg-85ph-66cc

Team Members <= 8.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'custom_css' Parameter

LOW 20

The Team Members – Multi Language Supported Team Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 8.7 due to insufficient input sanitizatio…

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00335 Published 2026-06-30 No fix listed CWE-79

TI-2025-41669 CVE-2025-68060 · GHSA-67p7-w6hw-p3w2

WordPress Team Member plugin <= 8.5 - SQL Injection vulnerability

LOW 33

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPMart Team Member allows Blind SQL Injection.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00228 Published 2026-05-07 No fix listed CWE-89

TI-2024-35056 CVE-2024-52385 · GHSA-hj97-mcr5-vcph

WordPress Team Member – Multi Language Supported Team plugin <= 7.4 - Limited Local File Inclusion vulnerability

LOW 20

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpmart Team Member team-showcase-supreme.This issue affects Team Member: from n/a through <= 7.4.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00437 Published 2024-12-09 No fix listed CWE-98

TI-2024-29546 CVE-2024-43957 · GHSA-6mjw-w6cc-3r69

WordPress Animated Number Counters plugin <= 1.9 - Editor+ Limited Local File Inclusion vulnerability

LOW 39

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Sk.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00567 Published 2024-08-29 No fix listed CWE-22

TI-2023-10015 CVE-2023-24393 · GHSA-7mfm-269h-xw89

WordPress Animated Number Counters Plugin <= 1.6 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Sk.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0037 Published 2023-08-10 No fix listed CWE-79

TI-2022-22648 CVE-2022-45846 · GHSA-vp2m-9mhr-29mq

WordPress Image Map Pro Plugin < 5.6.9 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Nickys Image Map Pro for WordPress - Interactive SVG Image Map Builder plugin < 5.6.9 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00253 Published 2023-05-10 Fixed in 5.6.9 CWE-352

TI-2023-09472 CVE-2023-23647 · GHSA-j6v2-mj9g-v64x

WordPress Team Member Plugin <= 4.4 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (author+) Stored Cross-Site Scripting (XSS) vulnerability in Sk.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00367 Published 2023-05-09 No fix listed CWE-79

TI-2023-10980 CVE-2023-25704 · GHSA-423h-j3gq-xjw2

WordPress Interactive SVG Image Map Builder Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Mehjabin Orthi Interactive SVG Image Map Builder plugin <= 1.0 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-03-28 No fix listed CWE-79

Vulnerabilities

Filters