Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: wpqode Clear all filters
TI-2026-10772 CVE-2026-12560 · GHSA-c3mc-8j5j-vh28

Editorial Rating <= 4.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Link URL' Field

Priority LOW 21

The Editorial Rating – Product Review & Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'Link URL' Field in all versions up to, and including, 4.0.5 due to insufficient input sanitizat…

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00386 Published 2026-06-30 No fix listed CWE-79
TI-2024-09760 CVE-2024-10536 · GHSA-8mxh-w9w9-hrmg

Missing authorization in wpqode FancyPost – Post Blocks, Grids & Sliders for Block Editor…

Priority LOW 20

The FancyPost – Best Ultimate Post Block, Post Grid, Layouts, Carousel, Slider For Gutenberg & Elementor plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the handle_b…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00274 Published 2025-01-07 No fix listed CWE-862