ERA404 vulnerabilities
7 published CVEs name ERA404 among the affected products.
- 7Published CVEs7 of them scored
- 1Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-12185
StaffList <= 3.2.6 - Authenticated (Admin+) Stored Cross-Site Scripting
era404 · StaffList
Medium4.4 - CVE-2025-52734
WordPress CropRefine Plugin <= 1.2.1 - Cross Site Scripting (XSS) Vulnerability
ERA404 · CropRefine
High7.1 - CVE-2025-57918
WordPress LinkedInclude Plugin <= 3.0.4 - Cross Site Request Forgery (CSRF) Vulnerability
ERA404 · LinkedInclude
High7.1 - CVE-2025-32255
WordPress StaffList plugin <= 3.2.7 - Sensitive Data Exposure vulnerability
ERA404 · StaffList
Medium5.3 - CVE-2025-32232
WordPress StaffList plugin <= 3.2.7 - Broken Access Control vulnerability
ERA404 · StaffList
Medium4.3 - CVE-2025-23845
WordPress ImageMeta Plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability
ERA404 · ImageMeta
High7.1 - CVE-2024-13749
StaffList <= 3.2.3 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
era404 · StaffList
Medium6.1