Threat database

12 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	8.8	EPSS 0.4%	CVE-2026-110369WordPress Team Members – GS Plugins · Deserialization of Untrusted Data High8.8EPSS 0.4%2026-10-21CVE Database V5CVE-2026-110369 Deserialization of Untrusted Data vulnerability in GS Plugins WordPress Team Members – GS Plugins gs-team-members allows Object Injection.This issue affects WordPress Team Members – GS Plugins: from n/a through 2.8.2. EPSS 0.4%Vulnerability GS Plugins	CVE Database V5	2026-10-21
High	8.8	EPSS 0.4%	CVE-2026-110370GS Pins for Pinterest · Deserialization of Untrusted Data High8.8EPSS 0.4%2026-10-21CVE Database V5CVE-2026-110370 Deserialization of Untrusted Data vulnerability in GS Plugins GS Pins for Pinterest gs-pinterest-portfolio allows Object Injection.This issue affects GS Pins for Pinterest: from n/a through 1.9.2. EPSS 0.4%Vulnerability GS Plugins	CVE Database V5	2026-10-21
Medium	5.3	EPSS 0.3%	CVE-2026-85311MarketKing · Missing Authorization Medium5.3EPSS 0.3%2026-09-04CVE Database V5CVE-2026-85311 Missing Authorization vulnerability in Kings Plugins MarketKing allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MarketKing: from n/a through 2.1.60. EPSS 0.3%Vulnerability Kings Plugins #cwe-862 #ghsa-4j6r-jmmc-298x	CVE Database V5	2026-09-04
Medium	5.4	EPSS 0.2%	CVE-2026-66589B2BKing · Missing Authorization Medium5.4EPSS 0.2%2026-08-18CVE Database V5CVE-2026-66589 CVE-2026-66589 is a missing authorization vulnerability in Kings Plugins B2BKing that allows exploitation of incorrectly configured access control security levels. It affects versions up to 5.2.30. The vulnerability has a CVSS 3.1 base score of 5.4, indicating a medium severity. There is no explicit information about a patch or remediation status in the provided data. EPSS 0.2%Vulnerability Kings Plugins #cwe-862 #ghsa-9cx2-qw86-5677	CVE Database V5	2026-08-18
Medium	4.9	EPSS 0.3%	CVE-2026-27346B2BKing · Missing Authorization Medium4.9EPSS 0.3%2026-05-25CVE Database V5CVE-2026-27346 Missing Authorization vulnerability in Kings Plugins B2BKing allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects B2BKing: from n/a before 5.2.10. EPSS 0.3%Vulnerability Kings Plugins #cwe-862	CVE Database V5	2026-05-25
Medium	4.7	EPSS 0.3%	CVE-2026-28106B2BKing Premium · Open Redirect Medium4.7EPSS 0.3%2026-03-06CVE Database V5CVE-2026-28106 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Kings Plugins B2BKing Premium allows Phishing.This issue affects B2BKing Premium: from n/a before 5.4.20. EPSS 0.3%Vulnerability Kings Plugins #cwe-601	CVE Database V5	2026-03-06
Medium	5.3	EPSS 0.2%	CVE-2025-62755GS Portfolio for Envato · Missing Authorization Medium5.3EPSS 0.2%2025-12-31CVE Database V5CVE-2025-62755 Missing Authorization vulnerability in GS Plugins GS Portfolio for Envato gs-envato-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GS Portfolio for Envato: from n/a through <= 1.4.2. EPSS 0.2%Vulnerability GS Plugins	CVE Database V5	2025-12-31
Medium	6.5	EPSS 0.3%	CVE-2024-56263GS Shots for Dribbble · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GS Plugins GS… Medium6.5EPSS 0.3%2025-01-02CVE Database V5CVE-2024-56263 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GS Plugins GS Shots for Dribbble gs-dribbble-portfolio allows DOM-Based XSS.This issue affects GS Shots for Dribbble: from n/a through <= 1.2.0. EPSS 0.3%Vulnerability GS Plugins	CVE Database V5	2025-01-02
Medium	6.5	EPSS 0.3%	CVE-2024-56262GS Coaches · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GS Plugins GS… Medium6.5EPSS 0.3%2025-01-02CVE Database V5CVE-2024-56262 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GS Plugins GS Coaches gs-coach allows Stored XSS.This issue affects GS Coaches: from n/a through <= 1.1.0. EPSS 0.3%Vulnerability GS Plugins	CVE Database V5	2025-01-02
Medium	6.5	EPSS 0.3%	CVE-2024-56261Project Showcase · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GS Plugins… Medium6.5EPSS 0.3%2025-01-02CVE Database V5CVE-2024-56261 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GS Plugins Project Showcase gs-projects allows Stored XSS.This issue affects Project Showcase: from n/a through <= 1.1.1. EPSS 0.3%Vulnerability GS Plugins	CVE Database V5	2025-01-02
Medium	6.5	EPSS 0.4%	CVE-2024-30443GS Testimonial Slider · Cross-site Scripting Medium6.5EPSS 0.4%2024-03-29CVE Database V5CVE-2024-30443 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GS Plugins GS Testimonial Slider allows Stored XSS.This issue affects GS Testimonial Slider: from n/a through 3.1.4. EPSS 0.4%Vulnerability GS Plugins #cwe-79	CVE Database V5	2024-03-29
Medium	6.5	EPSS 0.3%	CVE-2024-30192GS Pins for Pinterest · Cross-site Scripting Medium6.5EPSS 0.3%2024-03-27CVE Database V5CVE-2024-30192 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GS Plugins GS Pins for Pinterest allows Stored XSS.This issue affects GS Pins for Pinterest: from n/a through 1.8.2. EPSS 0.3%Vulnerability GS Plugins #cwe-79	CVE Database V5	2024-03-27

Showing 1–12 of 12 results