Dartiss vulnerabilities

Products

• Draft List 5
• Code Embed 4

Newest

• dartiss draft list WordPress Draft List plugin <= 2.6.4 - Cross Site Scripting (XSS) vulnerability CVE-2026-66603 6.5 MediumAugust 18, 2026
• dartiss draft-list Draft List - Contributor Stored Cross-Site Scripting via Draft Title in Custom Drafts Template Attributes CVE-2026-49466 6.5 MediumAugust 12, 2026
• dartiss code-embed Code Embed - Contributor Stored Cross-Site Scripting via Remote URL Embed CVE-2026-48093 6.5 MediumAugust 7, 2026
• dartiss shareopenly ShareOpenly has Cross-Site Scripting (XSS) via Missing esc_url() on Shared URL in Content Output CVE-2026-48094 5.3 MediumAugust 7, 2026
• dartiss draft list Draft List <= 2.6.3 - Authenticated (Author+) Stored Cross-Site Scripting via Draft Post Title CVE-2026-9104 6.4 MediumMay 22, 2026
• dartiss social post embed Social Post Embed <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Threads Embed CVE-2026-6809 6.4 MediumApril 28, 2026
• dartiss draft list Draft List <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'display_name' Parameter CVE-2026-4006 6.4 MediumMarch 19, 2026
• dartiss code embed Code Embed <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Fields CVE-2026-2512 6.4 MediumMarch 18, 2026
• dartiss draft list Draft List <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-11197 6.4 MediumOctober 11, 2025
• dartiss draft list Draft List <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-10181 6.4 MediumSeptember 20, 2025
• dartiss code embed Code Embed <= 2.5 - Authenticated (Contributor+) Server-Side Request Forgery CVE-2024-10814 6.4 MediumNovember 9, 2024
• dartiss code embed Code Embed <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-8804 6.4 MediumOctober 4, 2024
• dartiss code embed WordPress embed-code plugin <= 2.3.6 - Denial of Service Attack vulnerability CVE-2023-49837 6.5 MediumMarch 21, 2024