CryoutCreations vulnerabilities and threats

17 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	6.4	EPSS 0.3%	CVE-2026-15726Serious Slider (WordPress plugin) · Cross-site Scripting Medium6.4EPSS 0.3%2026-08-16CVE Database V5CVE-2026-15726 The Serious Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'theme' Shortcode Attribute in all versions up to, and including, 1.4.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. EPSS 0.3%Vulnerability cryout-creations CWE-79 #ghsa-8x7q-3q4v-jcjq	CVE Database V5	2026-08-16
Medium	4.3	EPSS 0.3%	CVE-2026-25399Serious Slider (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.3%2026-02-19CVE Database V5CVE-2026-25399 Missing Authorization vulnerability in CryoutCreations Serious Slider cryout-serious-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Serious Slider: from n/a through <= 1.2.7. EPSS 0.3%Vulnerability CryoutCreations	CVE Database V5	2026-02-19
Medium	6.5	EPSS 0.3%	CVE-2024-43993Liquido (WordPress plugin) · XSS or 'Cross-site Scripting' Medium6.5EPSS 0.3%2024-09-17CVE Database V5CVE-2024-43993 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Liquido allows Stored XSS.This issue affects Liquido: from n/a through 1.0.1.2. EPSS 0.3%Vulnerability CryoutCreations CWE-79	CVE Database V5	2024-09-17
Medium	6.5	EPSS 0.3%	CVE-2024-43994Kahuna (WordPress plugin) · XSS or 'Cross-site Scripting' Medium6.5EPSS 0.3%2024-09-17CVE Database V5CVE-2024-43994 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Kahuna allows Stored XSS.This issue affects Kahuna: from n/a through 1.7.0. EPSS 0.3%Vulnerability CryoutCreations CWE-79	CVE Database V5	2024-09-17
Medium	6.5	EPSS 0.3%	CVE-2024-44050Verbosa (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.3%2024-09-17CVE Database V5CVE-2024-44050 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cryout-creations Verbosa verbosa allows Stored XSS.This issue affects Verbosa: from n/a through <= 1.2.3. EPSS 0.3%Vulnerability cryout-creations	CVE Database V5	2024-09-17
Medium	6.5	EPSS 0.3%	CVE-2024-45451Roseta (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.3%2024-09-17CVE Database V5CVE-2024-45451 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cryout-creations Roseta roseta allows Stored XSS.This issue affects Roseta: from n/a through <= 1.3.0. EPSS 0.3%Vulnerability cryout-creations	CVE Database V5	2024-09-17
Medium	6.5	EPSS 0.3%	CVE-2024-45452Septera (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.3%2024-09-17CVE Database V5CVE-2024-45452 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cryout-creations Septera septera allows Stored XSS.This issue affects Septera: from n/a through <= 1.5.1. EPSS 0.3%Vulnerability cryout-creations	CVE Database V5	2024-09-17
Medium	6.5	EPSS 0.3%	CVE-2024-44054Fluida (WordPress plugin) · XSS or 'Cross-site Scripting' Medium6.5EPSS 0.3%2024-09-15CVE Database V5CVE-2024-44054 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Fluida allows Stored XSS.This issue affects Fluida: from n/a through 1.8.8. EPSS 0.3%Vulnerability CryoutCreations CWE-79	CVE Database V5	2024-09-15
Medium	6.5	EPSS 0.3%	CVE-2024-44056Mantra (WordPress plugin) · XSS or 'Cross-site Scripting' Medium6.5EPSS 0.3%2024-09-15CVE Database V5CVE-2024-44056 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Mantra allows Stored XSS.This issue affects Mantra: from n/a through 3.3.2. EPSS 0.3%Vulnerability CryoutCreations CWE-79	CVE Database V5	2024-09-15
Medium	6.5	EPSS 0.3%	CVE-2024-44057Nirvana (WordPress plugin) · XSS or 'Cross-site Scripting' Medium6.5EPSS 0.3%2024-09-15CVE Database V5CVE-2024-44057 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Nirvana allows Stored XSS.This issue affects Nirvana: from n/a through 1.6.3. EPSS 0.3%Vulnerability CryoutCreations CWE-79	CVE Database V5	2024-09-15
Medium	6.5	EPSS 0.3%	CVE-2024-44058Parabola (WordPress plugin) · XSS or 'Cross-site Scripting' Medium6.5EPSS 0.3%2024-09-15CVE Database V5CVE-2024-44058 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Parabola allows Stored XSS.This issue affects Parabola: from n/a through 2.4.1. EPSS 0.3%Vulnerability CryoutCreations CWE-79	CVE Database V5	2024-09-15
Medium	6.5	EPSS 0.3%	CVE-2024-43951Tempera (WordPress plugin) · XSS or 'Cross-site Scripting' Medium6.5EPSS 0.3%2024-08-29CVE Database V5CVE-2024-43951 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Tempera allows Stored XSS.This issue affects Tempera: from n/a through 1.8.2. EPSS 0.3%Vulnerability CryoutCreations CWE-79	CVE Database V5	2024-08-29
Medium	6.5	EPSS 0.3%	CVE-2024-43952Esotera (WordPress plugin) · XSS or 'Cross-site Scripting' Medium6.5EPSS 0.3%2024-08-29CVE Database V5CVE-2024-43952 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Esotera allows Stored XSS.This issue affects Esotera: from n/a through 1.2.5.1. EPSS 0.3%Vulnerability CryoutCreations CWE-79	CVE Database V5	2024-08-29
Medium	6.5	EPSS 0.3%	CVE-2024-43351Bravada (WordPress plugin) · XSS or 'Cross-site Scripting' Medium6.5EPSS 0.3%2024-08-18CVE Database V5CVE-2024-43351 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Bravada bravada allows Stored XSS.This issue affects Bravada: from n/a through 1.1.2. EPSS 0.3%Vulnerability CryoutCreations CWE-79	CVE Database V5	2024-08-18
Medium	6.5	EPSS 0.3%	CVE-2024-37248Anima (WordPress plugin) · XSS or 'Cross-site Scripting' Medium6.5EPSS 0.3%2024-06-26CVE Database V5CVE-2024-37248 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Anima allows Stored XSS.This issue affects Anima: from n/a through 1.4.1. EPSS 0.3%Vulnerability CryoutCreations CWE-79	CVE Database V5	2024-06-26
Medium	6.5	EPSS 0.3%	CVE-2024-35762Serious Slider (WordPress plugin) · XSS or 'Cross-site Scripting' Medium6.5EPSS 0.3%2024-06-21CVE Database V5CVE-2024-35762 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Cryout Creations Serious Slider allows Stored XSS.This issue affects Serious Slider: from n/a through 1.2.4. EPSS 0.3%Vulnerability Cryout Creations CWE-79	CVE Database V5	2024-06-21
Medium	4.3	EPSS 0.2%	CVE-2024-33650Serious Slider (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2024-04-26CVE Database V5CVE-2024-33650 Cross-Site Request Forgery (CSRF) vulnerability in Cryout Creations Serious Slider.This issue affects Serious Slider: from n/a through 1.2.4. EPSS 0.2%Vulnerability Cryout Creations CWE-352	CVE Database V5	2024-04-26

Page 1 of 1