Skip to content
Aviplugins.com vulnerabilities
Newest
-
aviplugins.com custom post type attachment
WordPress Custom Post Type Attachment plugin <= 3.4.6 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62907
6.5 Medium
-
avimegladon wp register profile with shortcode
WP Register Profile With Shortcode <= 3.6.2 - Authenticated (Contributor+) Sensitive Information Exposure
CVE-2025-4593
6.5 Medium
-
aviplugins.com thumbnail editor
WordPress Thumbnail Editor plugin <= 2.3.3 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-53282
6.5 Medium
-
aviplugins.com wp register profile with shortcode
WordPress WP Register Profile With Shortcode plugin <= 3.6.3 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-50042
6.5 Medium
-
aviplugins.com wp easy poll
WordPress WP Easy Poll Plugin <= 2.2.9 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-32562
7.1 High
-
aviplugins.com contact form with shortcode
WordPress Contact Form With Shortcode plugin <= 4.2.5 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-24564
7.1 High
-
aviplugins.com login widget with shortcode
WordPress Login Widget With Shortcode plugin <= 6.1.2 - Open Redirection vulnerability
CVE-2024-54255
4.7 Medium
-
aviplugins.com wp booking
Cross-site scripting vulnerability exists in WP Booking versions prior to 2.4.5. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is accessing…
CVE-2024-35297
4.7 Medium
-
avimegladon custom post type attachment
Custom Post Type Attachment <= 3.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via pdf_attachment Shortcode
CVE-2024-4546
6.4 Medium
-
avimegladon wp register profile with shortcode
WP Register Profile With Shortcode <= 3.5.9 - Cross-Site Request Forgery to User Password Reset
CVE-2023-5448
8.8 High
-
aviplugins wp register profile with shortcode
WordPress WP Register Profile With Shortcode Plugin <= 3.5.7 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-23818
5.9 Medium