Threat database

2 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.4	EPSS 0.2%	CVE-2025-11764Shortcodes Bootstrap · Cross-site Scripting Medium6.4EPSS 0.2%2025-11-21CVE Database V5CVE-2025-11764 The Shortcodes Bootstrap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' parameter in the [notification] shortcode in all versions up to, and including, 1.1. This is due to missing input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. EPSS 0.2%Vulnerability fastmover #cwe-79	CVE Database V5	2025-11-21
Medium	4.3	EPSS 0.2%	CVE-2025-28887Plugins Last Updated Column · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2025-03-11CVE Database V5CVE-2025-28887 Cross-Site Request Forgery (CSRF) vulnerability in Fastmover Plugins Last Updated Column plugins-last-updated-column allows Cross Site Request Forgery.This issue affects Plugins Last Updated Column: from n/a through <= 0.1.3. EPSS 0.2%Vulnerability Fastmover	CVE Database V5	2025-03-11

Showing 1–2 of 2 results