dartiss vulnerabilities

CVEs per yearBy the year they were published

1. 20242
2. 20252
3. 20267

Newest CVEs

• CVE-2026-49466

  Draft List - Contributor Stored Cross-Site Scripting via Draft Title in Custom Drafts Template Attributes

  dartiss · draft-list

  Medium6.5
• CVE-2026-48093

  Code Embed - Contributor Stored Cross-Site Scripting via Remote URL Embed

  dartiss · code-embed

  Medium6.5
• CVE-2026-48094

  ShareOpenly has Cross-Site Scripting (XSS) via Missing esc_url() on Shared URL in Content Output

  dartiss · shareopenly

  Medium5.3
• CVE-2026-9104

  Draft List <= 2.6.3 - Authenticated (Author+) Stored Cross-Site Scripting via Draft Post Title

  dartiss · Draft List

  Medium6.4
• CVE-2026-6809

  Social Post Embed <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Threads Embed

  dartiss · Social Post Embed

  Medium6.4
• CVE-2026-4006

  Draft List <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'display_name' Parameter

  dartiss · Draft List

  Medium6.4
• CVE-2026-2512

  Code Embed <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Fields

  dartiss · Code Embed

  Medium6.4
• CVE-2025-11197

  Draft List <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

  dartiss · Draft List

  Medium6.4
• CVE-2025-10181

  Draft List <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

  dartiss · Draft List

  Medium6.4
• CVE-2024-10814

  Code Embed <= 2.5 - Authenticated (Contributor+) Server-Side Request Forgery

  dartiss · Code Embed

  Medium6.4