samdani vulnerabilities

CVEs per yearBy the year they were published

1. 20244
2. 20253
3. 20261

Newest CVEs

• CVE-2024-13362

  Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

  sebet · Go Fetch Jobs (for WP Job Manager)

  Medium6.1
• CVE-2025-2262

  Logo Slider <= 3.7.3 - Unauthenticated Arbitrary Shortcode Execution

  samdani · Logo Slider – Logo Showcase, Logo Carousel, Logo Gallery and Client Logo Presentation

  High7.3
• CVE-2024-11746

  Discover the Best Woocommerce Product Brands Plugin for WordPress – Woocommerce Brands Plugin <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

  samdani · GS Brands for WooCommerce

  Medium6.4
• CVE-2024-12249

  GS Insever Portfolio <= 1.4.5 - Missing Authorization to Authenticated (Subscriber+) CSS Injection

  samdani · GS Insever Portfolio

  Medium4.3
• CVE-2024-11766

  WordPress Book Plugin for Displaying Books in Grid, Flip, Slider, Popup Layout and more <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

  samdani · GS Books Showcase – Display Books in Grid, Slider & More | Library for WordPress

  Medium6.4
• CVE-2024-11765

  WordPress Portfolio Plugin – A Plugin for Making Filterable Portfolio Grid, Portfolio Slider and more <= 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

  samdani · GS Portfolio – A Plugin for Making Filterable Portfolio Grid, Portfolio Slider and more

  Medium6.4
• CVE-2024-11453

  WordPress Pinterest Plugin – Make a Popup, User Profile, Masonry and Gallery Layout <= 1.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

  samdani · GS Pinterest Portfolio – Pins Grid, Masonry, User Profile, Popup & Board Widgets

  Medium6.4
• CVE-2022-4974

  Freemius SDK <= 2.4.2 - Missing Authorization Checks

  dashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress

  Medium6.3