Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

12 records

Vendor: yonifre Clear all filters
TI-2025-37510 CVE-2025-60144 · GHSA-4675-p6mw-cp72

WordPress Lenix scss compiler Plugin <= 1.2 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yonifre Lenix scss compiler lenix-scss-compiler allows Stored XSS.This issue affects Lenix scss compiler: from n/a thr…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.0023 Published 2025-09-26 No fix listed CWE-79
TI-2025-09073 CVE-2025-9888 · GHSA-v45j-gfqx-2v3x

Maspik <= 2.5.6 - Cross-Site Request Forgery

Priority LOW 19

The Maspik – Ultimate Spam Protection plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.6.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00167 Published 2025-09-10 No fix listed CWE-352
TI-2024-08521 CVE-2024-9182 · GHSA-x579-fc2r-gxmj

Maspik - Advanced Spam protection < 2.1.3 - Admin+ Stored XSS

Priority MEDIUM 55

The Maspik WordPress plugin before 2.1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disall…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00326 Published 2025-05-15 Fixed in 2.1.3 CWE-79
TI-2025-00878 CVE-2025-1039 · GHSA-9qjq-983m-84r8

Lenix Elementor Leads addon <= 1.8.2 - Unauthenticated Stored Cross-Site Scripting via URL Form Field

Priority LOW 38

The Lenix Elementor Leads addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a URL form field in all versions up to, and including, 1.8.2 due to insufficient input sanitization and output escapin…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00441 Published 2025-02-20 No fix listed CWE-79
TI-2024-36004 CVE-2024-53806 · GHSA-24px-m2q8-87hf

WordPress Maspik plugin <= 2.2.7 - CSRF to Settings Change vulnerability

Priority LOW 25

Missing Authorization vulnerability in yonifre Maspik – Spam blacklist contact-forms-anti-spam allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Maspik – Spam blacklist: from n/a…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0041 Published 2024-12-06 No fix listed CWE-862
TI-2024-16558 CVE-2024-25101 · GHSA-h4j9-fx9v-cwgq

WordPress Maspik – Spam blacklist Plugin <= 0.10.6 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yonifre Maspik – Spam Blacklist allows Stored XSS.This issue affects Maspik – Spam Blacklist: from n/a through 0.10.6.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00418 Published 2024-03-13 No fix listed CWE-79
TI-2023-26135 CVE-2023-48272 · GHSA-x6rc-725g-mf2x

WordPress Maspik – Spam blacklist Plugin <= 0.9.2 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yonifre Maspik – Spam Blacklist allows Stored XSS.This issue affects Maspik – Spam Blacklist: from n/a through 0.9.2.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00412 Published 2023-11-30 No fix listed CWE-79