Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: wpmonks Clear all filters
TI-2026-10711 CVE-2026-12477 · GHSA-5w9q-5r59-3g9f

Gravity Booster <= 5.26 - Authenticated (Editor+) Stored Cross-Site Scripting via 'stylerSettings' Parameter

Priority LOW 20

The Gravity Booster – Styles & Layouts for Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.26 due to insufficient input sanitizat…

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00327 Published 2026-08-16 No fix listed CWE-79
TI-2024-35055 CVE-2024-52384 · GHSA-5vxp-rmvc-cvwj

Unrestricted file upload in wpmonks Sage AI: Chatbots, OpenAI GPT-4 Bulk Articles…

Priority MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in wpmonks Sage AI: Chatbots, OpenAI GPT-4 Bulk Articles, Dalle-3 Image Generation ai-content-generator allows Upload a Web Shell to a Web Server.This issue a…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00492 Published 2024-11-14 No fix listed CWE-434
TI-2024-09931 CVE-2024-10717 · GHSA-f53h-2f4m-78jf

Styler for Ninja Forms <= 3.3.4 - Authenticated (Subscriber+) Arbitrary Option Deletion via deactivate_license

Priority LOW 29

The Styler for Ninja Forms plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the deactivate_license function in all versions…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00409 Published 2024-11-13 No fix listed CWE-862