Era404 vulnerabilities

Products

• Stafflist 5

Newest

• era404 stafflist StaffList <= 3.2.6 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2025-12185 4.4 MediumNovember 27, 2025
• era404 croprefine WordPress CropRefine Plugin <= 1.2.1 - Cross Site Scripting (XSS) Vulnerability CVE-2025-52734 7.1 HighOctober 22, 2025
• era404 linkedinclude WordPress LinkedInclude Plugin <= 3.0.4 - Cross Site Request Forgery (CSRF) Vulnerability CVE-2025-57918 7.1 HighSeptember 22, 2025
• era404 stafflist WordPress StaffList plugin <= 3.2.7 - Sensitive Data Exposure vulnerability CVE-2025-32255 5.3 MediumApril 4, 2025
• era404 stafflist WordPress StaffList plugin <= 3.2.7 - Broken Access Control vulnerability CVE-2025-32232 4.3 MediumApril 4, 2025
• bep imagemeta WordPress ImageMeta Plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-23845 7.1 HighFebruary 17, 2025
• era404 stafflist StaffList <= 3.2.3 - Cross-Site Request Forgery to Reflected Cross-Site Scripting CVE-2024-13749 6.1 MediumFebruary 12, 2025
• era404 stafflist StaffList < 3.1.5 - Admin+ SQLi CVE-2022-1556 EPSS 20.1% 9.8 CriticalMay 30, 2022