Skip to content
Noroxi

plugin-planet records

22 published records for vendor plugin-planet.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
40.9%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 21
  3. 22
  4. 23
  5. 24
  6. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

22 records
  • CVE-2019-25138
    40Plan

    User Submitted Posts <= 20190312 - Unauthenticated Arbitrary File Upload

    CriticalCVSS 9.8No exploitEPSS 2%

    plugin-planet · user submitted postsJun 6, 2023

  • CVE-2023-45603
    39Monitor

    WordPress User Submitted Posts Plugin <= 20230902 is vulnerable to Arbitrary File Upload

    CriticalCVSS 9.8No exploitEPSS 1%

    plugin-planet · user submitted postsDec 20, 2023

  • CVE-2022-1165
    37Monitor

    Blackhole for Bad Bots < 3.3.2 - Arbitrary IP Address Blocking via IP Spoofing

    CriticalCVSS 9.1No exploitEPSS 2%

    plugin-planet · blackhole for bad botsApr 4, 2022

  • CVE-2022-27849
    31Monitor

    WordPress Simple Ajax Chat plugin <= 20220115 - Sensitive Information Disclosure vulnerability

    HighCVSS 7.5Proof of conceptEPSS 5%

    plugin-planet · simple ajax chatApr 15, 2022

  • CVE-2024-1983
    28Monitor

    Simple Ajax Chat < 20240223 - Unauthenticated Stored XSS

    HighCVSS 7.1No exploitEPSS 0%

    plugin-planet · simple ajax chatMar 20, 2024

  • CVE-2021-24409
    25Monitor

    Prismatic < 2.8 - Reflected Cross-Site Scripting (XSS)

    MediumCVSS 6.1Proof of conceptEPSS 2%

    plugin-planet · prismaticJul 12, 2021

  • CVE-2016-11001
    24Monitor

    The user-submitted-posts plugin before 20160215 for WordPress has XSS via the user-submitted-content field.

    MediumCVSS 6.1No exploitEPSS 1%

    plugin-planet · user submitted postsSep 20, 2019

  • CVE-2022-25601
    24Monitor

    WordPress Contact Form X plugin <= 2.4 - Reflected Cross-Site Scripting (XSS) vulnerability

    MediumCVSS 6.1No exploitEPSS 1%

    plugin-planet · contact form xMar 11, 2022

  • CVE-2022-25610
    24Monitor

    WordPress Simple Ajax Chat plugin <= 20220115 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability

    MediumCVSS 6.1No exploitEPSS 1%

    plugin-planet · simple ajax chatMar 25, 2022

  • CVE-2024-0979
    24Monitor

    Dashboard Widgets Suite <= 3.4.3 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    plugin-planet · dashboard widgets suiteJun 13, 2024

  • CVE-2021-24408
    21Monitor

    Prismatic < 2.8 - Contributor+ Stored XSS

    MediumCVSS 5.4No exploitEPSS 1%

    plugin-planet · prismaticJul 12, 2021

  • CVE-2023-5614
    21Monitor

    Theme Switcha <= 3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    plugin-planet · theme switchaOct 20, 2023

  • CVE-2023-4308
    21Monitor

    User Submitted Posts <= 20230809 - Unauthenticated Stored Cross-Site Scripting via 'user-submitted-content'

    MediumCVSS 5.4No exploitEPSS 0%

    plugin-planet · user submitted postsAug 15, 2023

  • CVE-2023-4779
    21Monitor

    User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20230811 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    plugin-planet · user submitted postsSep 6, 2023

  • CVE-2023-4838
    21Monitor

    The Simple Download Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in versions up to,

    MediumCVSS 5.4No exploitEPSS 0%

    plugin-planet · simple download counterSep 8, 2023

  • CVE-2024-2470
    21Monitor

    Simple Ajax Chat < 20240412 - Admin+ Stored XSS

    MediumCVSS 5.4No exploitEPSS 0%

    plugin-planet · simple ajax chatJun 4, 2024

  • CVE-2025-46240
    21Monitor

    WordPress Simple Download Counter plugin <= 2.2 - Cross Site Scripting (XSS) Vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    plugin-planet · simple download counterApr 22, 2025

  • CVE-2025-46239
    21Monitor

    WordPress Theme Switcha plugin <= 3.4 - Cross Site Scripting (XSS) Vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    plugin-planet · theme switchaApr 22, 2025

  • CVE-2024-5002
    19Monitor

    User Submitted Posts < 20240516 - Admin+ Stored XSS

    MediumCVSS 4.8No exploitEPSS 0%

    plugin-planet · user submitted postsJul 13, 2024

  • CVE-2023-49743
    19Monitor

    WordPress Dashboard Widgets Suite Plugin <= 3.4.1 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 4.8No exploitEPSS 0%

    plugin-planet · dashboard widget suiteDec 14, 2023

  • CVE-2023-26517
    19Monitor

    WordPress Dashboard Widgets Suite Plugin <= 3.2.1 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 4.8No exploitEPSS 0%

    plugin-planet · dashboard widget suiteMay 6, 2023

  • CVE-2022-27850
    17Monitor

    WordPress Simple Ajax Chat plugin <= 20220115 - Multiple Cross-Site Request Forgery (CSRF) vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    plugin-planet · simple ajax chatApr 15, 2022