elliotvs vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20242
3. 20251
4. 20262

Newest CVEs

• CVE-2026-93900

  Simple CAPTCHA with Cloudflare Turnstile <= 1.44.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

  elliotvs · Simple CAPTCHA with Cloudflare Turnstile

  Medium6.4
• CVE-2024-13362

  Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

  sebet · Go Fetch Jobs (for WP Job Manager)

  Medium6.1
• CVE-2025-3598

  Coupon Affiliates – Affiliate Plugin for WooCommerce <= 6.3.0 - Reflected Cross-Site Scripting via 'commission_summary' Parameter

  elliotvs · Coupon Affiliates – Affiliate Plugin for WooCommerce

  Medium6.1
• CVE-2024-12421

  Coupon Affiliates – Affiliate Plugin for WooCommerce <= 5.16.7.1 - Unauthenticated Arbitrary Shortcode Execution and Reflected Cross-Site Scripting

  elliotvs · Coupon Affiliates – Affiliate Plugin for WooCommerce

  Medium6.5
• CVE-2022-4974

  Freemius SDK <= 2.4.2 - Missing Authorization Checks

  dashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress

  Medium6.3
• CVE-2023-5135

  Simple Cloudflare Turnstile <= 1.23.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

  elliotvs · Simple CAPTCHA Alternative with Cloudflare Turnstile

  Medium6.4