Skip to content
Damian-gora vulnerabilities
Newest
-
damian-gora fibosearch – ajax search for woocommerce
FiboSearch <= 1.34.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'purchased_plan' Parameter
CVE-2026-100106
6.4 Medium
-
100plugins open user map, 5starplugins dynamic copyright year, easy age verify +128 more +130 more
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
CVE-2024-13362
6.1 Medium
-
damian-gora fibosearch – ajax search for woocommerce
FiboSearch – Ajax Search for WooCommerce <= 1.32.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via thegem_te_search Shortcode
CVE-2025-14298
5.4 Medium
-
damian-gora justified gallery
WordPress Justified Gallery plugin <= 1.7.3 - Broken Access Control vulnerability
CVE-2023-40213
4.3 Medium
-
5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 more
Freemius SDK <= 2.4.2 - Missing Authorization Checks
CVE-2022-4974
6.3 Medium
-
fibosearch, damian-gora fibosearch – ajax search for woocommerce +1 more
The FiboSearch - AJAX Search for WooCommerce plugin for WordPress is vulnerable to Stored Cross...
CVE-2023-2450
4.4 Medium
-
damian-gora justified gallery, justified gallery project gallery +1 more
Justified Gallery < 1.7.1 - Contributor+ Stored XSS via Shortcode
CVE-2022-4651
5.4 Medium
-
fibosearch, damian-gora fibosearch – ajax search for woocommerce +1 more
FiboSearch < 1.18.0 - Admin+ Stored Cross-Site Scripting
CVE-2022-1469
4.8 Medium