Alexander vulnerabilities and threats

9 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	4.3	EPSS 0.3%	CVE-2025-62874AnyComment (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.3%2025-12-31CVE Database V5CVE-2025-62874 Missing Authorization vulnerability in Alexander AnyComment anycomment allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AnyComment: from n/a through <= 0.3.6. EPSS 0.3%Vulnerability Alexander	CVE Database V5	2025-12-31
High	7.5	EPSS 0.5%	CVE-2025-60240AnyComment (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High7.5EPSS 0.5%2025-11-06CVE Database V5CVE-2025-60240 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Alexander AnyComment anycomment allows PHP Local File Inclusion.This issue affects AnyComment: from n/a through <= 0.3.6. EPSS 0.5%Vulnerability Alexander	CVE Database V5	2025-11-06
High	8.5	EPSS 0.4%	CVE-2025-48091AnyComment (WordPress plugin) · SQL Injection High8.5EPSS 0.4%2025-10-22CVE Database V5CVE-2025-48091 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alexander AnyComment anycomment allows SQL Injection.This issue affects AnyComment: from n/a through <= 0.3.6. EPSS 0.4%Vulnerability Alexander	CVE Database V5	2025-10-22
Medium	6.5	EPSS 0.2%	CVE-2025-58227Podlove Subscribe button (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2025-09-22CVE Database V5CVE-2025-58227 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alexander Lueken Podlove Subscribe button podlove-subscribe-button allows Stored XSS.This issue affects Podlove Subscribe button: from n/a through <= 1.3.11. EPSS 0.2%Vulnerability Alexander Lueken	CVE Database V5	2025-09-22
High	7.1	EPSS 0.2%	CVE-2025-39430mLanguage (WordPress plugin) · Cross-Site Request Forgery (CSRF) High7.1EPSS 0.2%2025-04-17CVE Database V5CVE-2025-39430 Cross-Site Request Forgery (CSRF) vulnerability in Alexander Rauscha mLanguage mlanguage allows Stored XSS.This issue affects mLanguage: from n/a through <= 1.6.1. EPSS 0.2%Vulnerability Alexander Rauscha	CVE Database V5	2025-04-17
Medium	6.5	EPSS 0.3%	CVE-2025-23824FontAwesome.io ShortCodes (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.3%2025-01-16CVE Database V5CVE-2025-23824 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alexander Weleczka FontAwesome.io ShortCodes allows Stored XSS.This issue affects FontAwesome.io ShortCodes: from n/a through 1.0. EPSS 0.3%Vulnerability Alexander Weleczka CWE-79	CVE Database V5	2025-01-16
Medium	4.3	EPSS 0.4%	CVE-2024-53785Chatter (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.4%2024-12-09CVE Database V5CVE-2024-53785 Missing Authorization vulnerability in Alexander Volkov Chatter.This issue affects Chatter: from n/a through 1.0.1. EPSS 0.4%Vulnerability Alexander Volkov CWE-862	CVE Database V5	2024-12-09
High	7.1	EPSS 0.4%	CVE-2024-50532Events Manager Pro (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.4%2024-11-19CVE Database V5CVE-2024-50532 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jerin K Alexander Events Manager Pro – extended events-manager-pro-extended allows Reflected XSS.This issue affects Events Manager Pro – extended: from n/a through <= 0.1. EPSS 0.4%Vulnerability Jerin K Alexander	CVE Database V5	2024-11-19
Critical	9.9	EPSS 0.5%	CVE-2024-49669INK Official (WordPress plugin) · Unrestricted File Upload Critical9.9EPSS 0.5%2024-10-23CVE Database V5CVE-2024-49669 Unrestricted Upload of File with Dangerous Type vulnerability in Alexander De Ridder INK Official ink-official allows Upload a Web Shell to a Web Server.This issue affects INK Official: from n/a through <= 4.1.2. EPSS 0.5%Vulnerability Alexander De Ridder	CVE Database V5	2024-10-23

Page 1 of 1