takien vulnerabilities and threats

The Word Replacer plugin for WordPress contains a stored cross-site scripting (XSS) vulnerability in the 'replacement' parameter in all versions up to and including 0.4. This vulnerability arises from improper input validation and insufficient output escaping, allowing authenticated administrators to inject malicious scripts that execute when users view the affected pages. The vulnerability has a medium severity score of 4.4 and requires high privileges to exploit.

Cross-Site Request Forgery (CSRF) vulnerability in takien Rewrite rewrite allows Cross Site Request Forgery.This issue affects Rewrite: from n/a through <= 0.2.1.