Vulnerabilities

TI-2025-30455 CVE-2025-48085 · GHSA-xpx5-8gpf-9924

WordPress Simple Stripe plugin <= 0.9.17 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in ZIPANG Simple Stripe simple-stripe allows Stored XSS.This issue affects Simple Stripe: from n/a through <= 0.9.17.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00127 Published 2025-11-06 No fix listed CWE-352

TI-2024-11876 CVE-2024-12815 · GHSA-p2c4-4487-qjm7

Point Maker <= 0.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

LOW 28

The Point Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'point_maker' shortcode in all versions up to, and including, 0.1.6 due to insufficient input sanitization and output esc…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00302 Published 2025-03-05 No fix listed CWE-79

TI-2024-32910 CVE-2024-49317 · GHSA-qg3g-xgh9-3rhh

WordPress Point Maker plugin <= 0.1.4 - Local File Inclusion vulnerability

LOW 36

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ZIPANG Point Maker point-maker allows PHP Local File Inclusion.This issue affects Point Maker: from…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.0056 Published 2024-10-17 No fix listed CWE-98

Vulnerabilities

Filters

WordPress Simple Stripe plugin <= 0.9.17 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Point Maker <= 0.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

WordPress Point Maker plugin <= 0.1.4 - Local File Inclusion vulnerability