Marcelismus Wp-appbox vulnerabilities

• marcelismus wp-appbox WP-Appbox <= 4.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via appbox Shortcode CVE-2025-1489 Public exploit 6.4 MediumFebruary 21, 2025
• marcelismus wp-appbox WP-Appbox <= 4.5.3 - Reflected Cross-Site Scripting CVE-2024-12710 6.1 MediumDecember 24, 2024