Browse CVEs

MEDIUM 5.4 CVE-2024-6261 The Image Photo Gallery Final Tiles Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'FinalTilesGallery' short… Image Photo Gallery Final Tiles Grid 3.6.1+ Fix from $1,6002025-02-27 MEDIUM 5.4 CVE-2023-28493 Auth (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Macho Themes NewsMag theme <= 2.4.4 versions. Newsmag after 2.4.4 Fix from $1,6002023-05-08 MEDIUM 5.4 CVE-2023-27619 Auth (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Macho Themes Regina Lite theme <= 2.0.7 versions. Regina Lite after 2.0.7 Fix from $1,6002023-04-25 MEDIUM 5.4 CVE-2022-4717 The Strong Testimonials WordPress plugin before 3.0.3 does not validate and escape some of its shortcode attributes before outputting them back in th… Strong Testimonials 3.0.3+ Fix from $1,6002023-02-06 MEDIUM 5.4 CVE-2022-4837 The CPO Companion WordPress plugin before 1.1.0 does not validate and escape some of its shortcode attributes before outputting them back in the page… Cpo Companion 1.1.0+ Fix from $1,6002023-01-30 MEDIUM 5.4 CVE-2022-0186 The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.5.3 does not sanitise and escape the Description field when editing a gallery, all… Image Photo Gallery Final Tiles Grid 3.5.3+ Fix from $1,6002022-02-21 MEDIUM 5.4 CVE-2020-14962 Multiple XSS vulnerabilities in the Final Tiles Gallery plugin before 3.4.19 for WordPress allow remote attackers to inject arbitrary web script or H… Image Photo Gallery Final Tiles Grid 3.4.19+ Fix from $1,6002020-06-22