Total-soft vulnerabilities

Products

• Video Gallery 4
• Event Calendar 3
• Ts Poll 2

Newest

• total-soft event calendar Event Calendar <= 1.0.4 - Unauthenticated Arbitrary Calendar Deletion CVE-2024-8700 7.5 HighMay 15, 2025
• total-soft portfolio gallery – responsive image gallery WordPress Portfolio Gallery – Responsive Image Gallery plugin <= 1.4.6 - Broken Access Control vulnerability CVE-2023-32585 7.5 HighDecember 13, 2024
• total-soft video gallery, totalsoft video gallery – youtube gallery, vimeo, video portfolio, image portfolio and image gallery, video gallery youtube gallery and vimeo gallery +2 more YouTube Gallery and Vimeo Gallery Plugin <= 2.4.2 - Authenticated (Administrator+) SQL Injection CVE-2024-10247 7.2 HighDecember 6, 2024
• total-soft video gallery, totalsoft video gallery – youtube gallery, vimeo, video portfolio, image portfolio and image gallery +1 more Video Gallery <= 2.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2024-9769 4.4 MediumDecember 6, 2024
• pollbytotalsoft ts poll TS Poll – Survey, Versus Poll, Image Poll, Video Poll < 2.4.0 - Admin+ SQL Injection CVE-2024-8625 7.2 HighOctober 21, 2024
• total-soft ts poll, totalsoft ts poll – survey, versus poll, image poll, video poll, poll survey +2 more TS Poll – Survey, Versus Poll, Image Poll, Video Poll <= 2.4.0 - Authenticated (Administrator+) SQL Injection via orderby Parameter CVE-2024-9022 7.2 HighOctober 10, 2024
• total-soft video gallery, video gallery by total-soft gallery – best wordpress youtube gallery plugin +1 more WordPress Video Gallery – YouTube Gallery Plugin <= 2.1.3 is vulnerable to SQL Injection CVE-2023-45069 7.6 HighNovember 6, 2023
• i thirteen web solution video gallery, video gallery by total-soft gallery +1 more WordPress Video Gallery – YouTube Gallery Plugin <= 1.7.6 is vulnerable to Cross Site Scripting (XSS) CVE-2023-25979 5.9 MediumMay 3, 2023
• total-soft event calendar, totalsoft event calendar – calendar (wordpress plugin) +1 more WordPress Event Calendar – Calendar plugin <= 1.4.6 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability CVE-2022-36390 4.1 MediumSeptember 21, 2022
• total-soft event calendar, totalsoft event calendar – calendar (wordpress plugin) +1 more WordPress Event Calendar – Calendar plugin <= 1.4.6 - Unauthenticated Event Deletion vulnerability CVE-2022-38067 6.5 MediumSeptember 9, 2022
• total-soft responsive poll An issue was discovered in the Responsive Poll through 1.3.4 for Wordpress. It allows an... CVE-2020-11673 9.8 CriticalApril 13, 2020