dartiss vulnerabilities
11 published CVEs name dartiss among the affected products.
- 11Published CVEs11 of them scored
- 7Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-49466
Draft List - Contributor Stored Cross-Site Scripting via Draft Title in Custom Drafts Template Attributes
dartiss · draft-list
Medium6.5 - CVE-2026-48093
Code Embed - Contributor Stored Cross-Site Scripting via Remote URL Embed
dartiss · code-embed
Medium6.5 - CVE-2026-48094
ShareOpenly has Cross-Site Scripting (XSS) via Missing esc_url() on Shared URL in Content Output
dartiss · shareopenly
Medium5.3 - CVE-2026-9104
Draft List <= 2.6.3 - Authenticated (Author+) Stored Cross-Site Scripting via Draft Post Title
dartiss · Draft List
Medium6.4 - CVE-2026-6809
Social Post Embed <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Threads Embed
dartiss · Social Post Embed
Medium6.4 - CVE-2026-4006
Draft List <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'display_name' Parameter
dartiss · Draft List
Medium6.4 - CVE-2026-2512
Code Embed <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Fields
dartiss · Code Embed
Medium6.4 - CVE-2025-11197
Draft List <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
dartiss · Draft List
Medium6.4 - CVE-2025-10181
Draft List <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
dartiss · Draft List
Medium6.4 - CVE-2024-10814
Code Embed <= 2.5 - Authenticated (Contributor+) Server-Side Request Forgery
dartiss · Code Embed
Medium6.4