Galaxy Weblinks vulnerabilities and threats

4 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	4.3	EPSS 0.1%	CVE-2025-60137Post Featured Video (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.1%2025-09-26CVE Database V5CVE-2025-60137 Cross-Site Request Forgery (CSRF) vulnerability in Galaxy Weblinks Post Featured Video post-featured-video allows Cross Site Request Forgery.This issue affects Post Featured Video: from n/a through <= 1.7. EPSS 0.1%Vulnerability Galaxy Weblinks CWE-352	CVE Database V5	2025-09-26
Medium	6.5	EPSS 0.4%	CVE-2025-32183Video Playlist For YouTube (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.4%2025-04-04CVE Database V5CVE-2025-32183 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Galaxy Weblinks Video Playlist For YouTube video-playlist-for-youtube allows Stored XSS.This issue affects Video Playlist For YouTube: from n/a through <= 6.7.1. EPSS 0.4%Vulnerability Galaxy Weblinks	CVE Database V5	2025-04-04
Medium	5.3	EPSS 0.4%	CVE-2025-31872Galaxy Weblinks WP Clone any post type · Missing Authorization Medium5.3EPSS 0.4%2025-04-01CVE Database V5CVE-2025-31872 Missing Authorization vulnerability in Galaxy Weblinks WP Clone any post type wp-clone-any-post-type allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Clone any post type: from n/a through <= 3.6. EPSS 0.4%Vulnerability	CVE Database V5	2025-04-01
Medium	4.7	EPSS 0.4%	CVE-2025-31871Galaxy Weblinks WP Clone any post type · Open Redirect Medium4.7EPSS 0.4%2025-04-01CVE Database V5CVE-2025-31871 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Galaxy Weblinks WP Clone any post type wp-clone-any-post-type allows Phishing.This issue affects WP Clone any post type: from n/a through <= 3.6. EPSS 0.4%Vulnerability	CVE Database V5	2025-04-01

Page 1 of 1