Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

aviplugins.com vulnerabilities

8 published CVEs name aviplugins.com among the affected products.

Newest CVEs

  • CVE-2025-62907

    WordPress Custom Post Type Attachment plugin <= 3.4.6 - Cross Site Scripting (XSS) vulnerability

    aviplugins.com · Custom Post Type Attachment

    Medium6.5
  • CVE-2025-53282

    WordPress Thumbnail Editor plugin <= 2.3.3 - Cross Site Scripting (XSS) Vulnerability

    aviplugins.com · Thumbnail Editor

    Medium6.5
  • CVE-2025-50042

    WordPress WP Register Profile With Shortcode plugin <= 3.6.3 - Cross Site Scripting (XSS) Vulnerability

    aviplugins.com · WP Register Profile With Shortcode

    Medium6.5
  • CVE-2025-32562

    WordPress WP Easy Poll Plugin <= 2.2.9 - Reflected Cross Site Scripting (XSS) vulnerability

    aviplugins.com · WP Easy Poll

    High7.1
  • CVE-2025-24564

    WordPress Contact Form With Shortcode plugin <= 4.2.5 - Reflected Cross Site Scripting (XSS) vulnerability

    aviplugins.com · Contact Form With Shortcode

    High7.1
  • CVE-2024-54255

    WordPress Login Widget With Shortcode plugin <= 6.1.2 - Open Redirection vulnerability

    aviplugins.com · Login Widget With Shortcode

    Medium4.7
  • CVE-2024-35297

    Cross-site scripting vulnerability exists in WP Booking versions prior to 2.4.5. If this vulnerability is exploited, an arbitrary script may be executed on the…

    aviplugins.com · WP Booking

    Medium4.7
  • CVE-2023-23818

    WordPress WP Register Profile With Shortcode Plugin <= 3.5.7 is vulnerable to Cross Site Scripting (XSS)

    Aviplugins.com · WP Register Profile With Shortcode

    Medium5.9