era404 StaffList vulnerabilities
4 published CVEs name era404 StaffList among the affected products.
- 4Published CVEs4 of them scored
- 1Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-12185
StaffList <= 3.2.6 - Authenticated (Admin+) Stored Cross-Site Scripting
era404 · StaffList
Medium4.4 - CVE-2025-32255
WordPress StaffList plugin <= 3.2.7 - Sensitive Data Exposure vulnerability
ERA404 · StaffList
Medium5.3 - CVE-2025-32232
WordPress StaffList plugin <= 3.2.7 - Broken Access Control vulnerability
ERA404 · StaffList
Medium4.3 - CVE-2024-13749
StaffList <= 3.2.3 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
era404 · StaffList
Medium6.1