Milan Petrovic vulnerabilities and threats

6 threats

Severity	CVSS	Signals	Threat	Source	Published
High	8.5	EPSS 0.4%	CVE-2026-57771GD Rating System (WordPress plugin) · SQL Injection High8.5EPSS 0.4%2026-07-13CVE Database V5CVE-2026-57771 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Milan Petrovic GD Rating System gd-rating-system allows Blind SQL Injection.This issue affects GD Rating System: from n/a through <= 3.7. EPSS 0.4%Vulnerability Milan Petrovic CWE-89	CVE Database V5	2026-07-13
High	7.1	EPSS 0.3%	CVE-2026-57403GD Security Headers (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2026-07-13CVE Database V5CVE-2026-57403 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Milan Petrovic GD Security Headers gd-security-headers allows Reflected XSS.This issue affects GD Security Headers: from n/a through <= 1.8. EPSS 0.3%Vulnerability Milan Petrovic CWE-79	CVE Database V5	2026-07-13
Medium	6.5	EPSS 0.2%	CVE-2025-58002GD bbPress Tools (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2025-09-22CVE Database V5CVE-2025-58002 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Milan Petrovic GD bbPress Tools gd-bbpress-tools allows DOM-Based XSS.This issue affects GD bbPress Tools: from n/a through <= 3.5.3. EPSS 0.2%Vulnerability Milan Petrovic	CVE Database V5	2025-09-22
High	7.1	EPSS 0.3%	CVE-2025-24608GD Mail Queue (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2025-01-31CVE Database V5CVE-2025-24608 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Milan Petrovic GD Mail Queue gd-mail-queue allows Reflected XSS.This issue affects GD Mail Queue: from n/a through <= 4.3. EPSS 0.3%Vulnerability Milan Petrovic	CVE Database V5	2025-01-31
Medium	5.3	EPSS 0.5%	CVE-2024-38709GD Rating System (WordPress plugin) · Path Traversal Medium5.3EPSS 0.5%2024-07-12CVE Database V5CVE-2024-38709 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Milan Petrovic GD Rating System allows PHP Local File Inclusion.This issue affects GD Rating System: from n/a through 3.6. EPSS 0.5%Vulnerability Milan Petrovic CWE-22	CVE Database V5	2024-07-12
High	7.1	EPSS 0.4%	CVE-2024-25093GD Rating System (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.4%2024-02-29CVE Database V5CVE-2024-25093 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Milan Petrovic GD Rating System allows Stored XSS.This issue affects GD Rating System: from n/a through 3.5. EPSS 0.4%Vulnerability Milan Petrovic CWE-79	CVE Database V5	2024-02-29

Page 1 of 1