Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: wpsofts Clear all filters
TI-2025-04566 CVE-2025-5092 · GHSA-hvm5-wg42-9f5q

Cross-site scripting in lightgalleryteam LightGallery WP

Priority LOW 28

Multiple plugins and/or themes for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled lightGallery library (<= 2.8.3) in various versions due to insufficient input sanitization and output es…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00256 Published 2025-11-20 No fix listed CWE-79
TI-2023-03081 CVE-2023-3292 · GHSA-9434-4jwv-6xgc

Grid Kit Premium < 2.2.0 - Multiple Reflected Cross-Site Scripting

Priority MEDIUM 60

The grid-kit-premium WordPress plugin before 2.2.0 does not escape some parameters as well as generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting which could be used against hig…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00458 Published 2023-07-31 Fixed in 2.2.0
TI-2021-07368 CVE-2021-25090 · GHSA-3prr-q5hc-2742

GridKit Portfolio < 2.1.0 - Subscriber+ Stored Cross-Site Scripting

Priority LOW 25

The Portfolio Gallery, Product Catalog WordPress plugin before 2.1.0 does not have authorisation and CSRF checks in various functions related to AJAX actions, allowing any authenticated users, such as subscriber, to call…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.006 Published 2022-04-11 Fixed in 2.1.0 CWE-79