Vulnerability index

Browse CVEs

7 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Image Photo Gallery Final Tiles Grid MEDIUM 5.4
CVE-2024-6261

The Image Photo Gallery Final Tiles Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'FinalTilesGallery' short…

Fix: 3.6.1+
Fix from $1,600 2025-02-27
Newsmag MEDIUM 5.4
CVE-2023-28493

Auth (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Macho Themes NewsMag theme <= 2.4.4 versions.

Fix: after 2.4.4
Fix from $1,600 2023-05-08
Regina Lite MEDIUM 5.4
CVE-2023-27619

Auth (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Macho Themes Regina Lite theme <= 2.0.7 versions.

Fix: after 2.0.7
Fix from $1,600 2023-04-25
Strong Testimonials MEDIUM 5.4
CVE-2022-4717

The Strong Testimonials WordPress plugin before 3.0.3 does not validate and escape some of its shortcode attributes before outputting them back in th…

Fix: 3.0.3+
Fix from $1,600 2023-02-06
Cpo Companion MEDIUM 5.4
CVE-2022-4837

The CPO Companion WordPress plugin before 1.1.0 does not validate and escape some of its shortcode attributes before outputting them back in the page…

Fix: 1.1.0+
Fix from $1,600 2023-01-30
Image Photo Gallery Final Tiles Grid MEDIUM 5.4
CVE-2022-0186

The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.5.3 does not sanitise and escape the Description field when editing a gallery, all…

Fix: 3.5.3+
Fix from $1,600 2022-02-21
Image Photo Gallery Final Tiles Grid MEDIUM 5.4
CVE-2020-14962

Multiple XSS vulnerabilities in the Final Tiles Gallery plugin before 3.4.19 for WordPress allow remote attackers to inject arbitrary web script or H…

Fix: 3.4.19+
Fix from $1,600 2020-06-22