Gregross vulnerabilities

Products

• Cyan Backup 4
• Auto Iframe 2

Newest

• gregross cyan backup CYAN Backup <= 2.5.4 - Authenticated (Admin+) Arbitrary File Deletion CVE-2025-12092 6.5 MediumNovember 8, 2025
• gregross cyan backup CYAN Backup < 2.5.3 - Admin+ Stored XSS via Remote Storage Settings CVE-2024-9663 5.4 MediumMay 15, 2025
• gregross cyan backup CYAN Backup < 2.5.3 - Admin+ Stored XSS via General Settings CVE-2024-9662 5.4 MediumMay 15, 2025
• gregross auto iframe Auto iFrame < 2.0 - Contributor+ XSS via Shortcode CVE-2024-10151 5.4 MediumJanuary 8, 2025
• greg ross cyan backup WordPress CYAN Backup plugin <= 2.5.3 - Arbitrary File Download vulnerability CVE-2024-52390 4.9 MediumNovember 18, 2024
• gregross auto iframe Auto iFrame <= 1.7 - Authenticated (Author+) Stored Cross-Site Scripting via tag Parameter CVE-2024-9449 6.4 MediumOctober 9, 2024
• greg ross just writing statistics WordPress Just Writing Statistics plugin <= 4.5 - Cross Site Scripting (XSS) vulnerability CVE-2024-35641 5.9 MediumJune 3, 2024