Jeff Starr vulnerabilities

Products

• User Submitted Posts 5
• Simple Ajax Chat 4
• Simple Ajax Chat (wordpress Plugin) 3
• Dashboard Widgets Suite 2
• Head Meta Data 2
• Prismatic 2

Newest

• jeff starr user submitted posts WordPress User Submitted Posts plugin <= 20260810 - Cross Site Scripting (XSS) vulnerability CVE-2026-62084 6.5 MediumSeptember 30, 2026
• jeff starr simple ajax chat Simple Ajax Chat < 20260827 - Unauthenticated Stored XSS via Chat Message Linkification CVE-2026-81807 8.8 HighSeptember 2, 2026
• jeff starr bbq pro WordPress BBQ Pro plugin <= 3.9 - Cross Site Scripting (XSS) vulnerability CVE-2026-73182 7.1 HighAugust 19, 2026
• jeff starr user submitted posts User Submitted Posts < 20260608 - Unauthenticated Stored XSS via Author Name CVE-2026-11570 4.2 MediumJuly 1, 2026
• jeff starr simple ajax chat WordPress Simple Ajax Chat plugin <= 20251121 - Sensitive Data Exposure vulnerability CVE-2026-3075 5.3 MediumFebruary 23, 2026
• jeff starr head meta data Head Meta Data <= 20251118 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta CVE-2026-0608 6.4 MediumJanuary 20, 2026
• jeff starr user submitted posts WordPress User Submitted Posts plugin <= 20251121 - Open Redirection vulnerability CVE-2025-68509 4.7 MediumDecember 24, 2025
• jeff starr head meta data WordPress Head Meta Data plugin <= 20250327 - Cross Site Scripting (XSS) vulnerability CVE-2025-66081 5.9 MediumNovember 21, 2025
• jeff starr simple statistics for feeds WordPress Simple Statistics for Feeds Plugin <= 20250322 - Cross Site Request Forgery (CSRF) Vulnerability CVE-2025-57892 4.3 MediumAugust 22, 2025
• jeff starr simple blog stats WordPress Simple Blog Stats plugin <= 20250416 - Cross Site Scripting (XSS) Vulnerability CVE-2025-47499 6.5 MediumMay 7, 2025
• jeff starr simple download counter WordPress Simple Download Counter plugin <= 2.2 - Cross Site Scripting (XSS) Vulnerability CVE-2025-46240 6.5 MediumApril 22, 2025
• jeff starr theme switcha WordPress Theme Switcha plugin <= 3.4 - Cross Site Scripting (XSS) Vulnerability CVE-2025-46239 6.5 MediumApril 22, 2025
• jeff starr user submitted posts User Submitted Posts < 20240516 - Admin+ Stored XSS CVE-2024-5002 4.8 MediumJuly 13, 2024
• jeff starr simple ajax chat Simple Ajax Chat < 20240412 - Admin+ Stored XSS CVE-2024-2470 5.4 MediumJune 4, 2024
• jeff starr user submitted posts WordPress User Submitted Posts plugin <= 20230901 - Cross Site Scripting (XSS) vulnerability CVE-2023-7251 6.5 MediumMarch 26, 2024
• jeff starr simple ajax chat Simple Ajax Chat < 20240223 - Unauthenticated Stored XSS CVE-2024-1983 7.1 HighMarch 20, 2024
• jeff starr user submitted posts – enable users to submit posts from the front end, plugin-planet user submitted posts +1 more WordPress User Submitted Posts Plugin <= 20230902 is vulnerable to Arbitrary File Upload CVE-2023-45603 9.0 CriticalDecember 20, 2023
• jeff starr dashboard widgets suite, plugin-planet dashboard widget suite +1 more WordPress Dashboard Widgets Suite Plugin <= 3.4.1 is vulnerable to Cross Site Scripting (XSS) CVE-2023-49743 5.9 MediumDecember 14, 2023
• jeff starr dashboard widgets suite, plugin-planet dashboard widget suite +1 more WordPress Dashboard Widgets Suite Plugin <= 3.2.1 is vulnerable to Cross Site Scripting (XSS) CVE-2023-26517 5.9 MediumMay 6, 2023
• jeff starr simple ajax chat (wordpress plugin), plugin-planet simple ajax chat +1 more WordPress Simple Ajax Chat plugin <= 20220115 - Multiple Cross-Site Request Forgery (CSRF) vulnerability CVE-2022-27850 5.4 MediumApril 15, 2022
• jeff starr simple ajax chat (wordpress plugin), plugin-planet simple ajax chat +1 more WordPress Simple Ajax Chat plugin <= 20220115 - Sensitive Information Disclosure vulnerability CVE-2022-27849 5.3 MediumApril 15, 2022
• plugin-planet simple ajax chat, jeff starr simple ajax chat (wordpress plugin) +1 more WordPress Simple Ajax Chat plugin <= 20220115 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability CVE-2022-25610 3.4 LowMarch 25, 2022
• plugin-planet contact form x, fedoraproject fedora, jeff starr contact form x (wordpress plugin) +2 more WordPress Contact Form X plugin <= 2.4 - Reflected Cross-Site Scripting (XSS) vulnerability CVE-2022-25601 4.7 MediumMarch 11, 2022
• jeff starr prismatic Prismatic < 2.8 - Reflected Cross-Site Scripting (XSS) CVE-2021-24409 6.1 MediumJuly 12, 2021
• jeff starr prismatic Prismatic < 2.8 - Contributor+ Stored XSS CVE-2021-24408 5.4 MediumJuly 12, 2021