PluginsPoint vulnerabilities and threats

5 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.1%	CVE-2025-48351Kento Splash Screen (WordPress plugin) · Cross-Site Request Forgery (CSRF) High7.1EPSS 0.1%2025-08-28CVE Database V5CVE-2025-48351 Cross-Site Request Forgery (CSRF) vulnerability in PluginsPoint Kento Splash Screen kento-splash-screen allows Stored XSS.This issue affects Kento Splash Screen: from n/a through <= 1.4. EPSS 0.1%Vulnerability PluginsPoint CWE-352	CVE Database V5	2025-08-28
High	7.1	EPSS 0.3%	CVE-2025-30559PluginsPoint Kento WordPress Stats · Cross-site Scripting High7.1EPSS 0.3%2025-04-01CVE Database V5CVE-2025-30559 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginsPoint Kento WordPress Stats kento-wp-stats allows Stored XSS.This issue affects Kento WordPress Stats: from n/a through <= 1.1. EPSS 0.3%Vulnerability	CVE Database V5	2025-04-01
Medium	6.5	EPSS 0.4%	CVE-2025-22518Justified Image Gallery (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.4%2025-01-07CVE Database V5CVE-2025-22518 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginsPoint Justified Image Gallery justified-image-gallery allows Stored XSS.This issue affects Justified Image Gallery: from n/a through <= 1.0. EPSS 0.4%Vulnerability PluginsPoint	CVE Database V5	2025-01-07
Medium	6.5	EPSS 0.2%	CVE-2025-22584Timeline Pro (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2025-01-07CVE Database V5CVE-2025-22584 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginsPoint Timeline Pro timeline-pro allows DOM-Based XSS.This issue affects Timeline Pro: from n/a through <= 1.3. EPSS 0.2%Vulnerability PluginsPoint	CVE Database V5	2025-01-07
Medium	6.5	EPSS 0.3%	CVE-2024-51583Kento Ads Rotator (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.3%2024-11-10CVE Database V5CVE-2024-51583 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginsPoint Kento Ads Rotator kento-ads-rotator allows Stored XSS.This issue affects Kento Ads Rotator: from n/a through <= 1.3. EPSS 0.3%Vulnerability PluginsPoint	CVE Database V5	2024-11-10

Page 1 of 1