Vulnerabilities

TI-2026-07825 CVE-2026-8903 · GHSA-c9g7-24f9-cgmr

Two-factor authentication (formerly IP Vault) <= 2.1 - Cross-Site Request Forgery to Settings Update

LOW 19

The Two-factor authentication (formerly IP Vault) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00139 Published 2026-05-27 No fix listed CWE-352

TI-2025-22625 CVE-2025-31444 · GHSA-66f6-7gwp-cw33

WordPress ShowTime Slideshow plugin <= 1.6 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in youtag ShowTime Slideshow showtime-slideshow allows Stored XSS.This issue affects ShowTime Slideshow: from n/a through <= 1.6.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00134 Published 2025-03-28 No fix listed CWE-352

TI-2022-04142 CVE-2022-4536 · GHSA-29xf-xj7q-wj7p

IP Vault – WP Firewall <= 1.1 - IP Address Spoofing to Protection Mechanism Bypass

LOW 30

The IP Vault – WP Firewall plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 1.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00242 Published 2024-08-31 No fix listed CWE-348

Vulnerabilities

Filters

Two-factor authentication (formerly IP Vault) <= 2.1 - Cross-Site Request Forgery to Settings Update

WordPress ShowTime Slideshow plugin <= 1.6 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

IP Vault – WP Firewall <= 1.1 - IP Address Spoofing to Protection Mechanism Bypass