Webvitaly vulnerabilities

Products

• Sitekit 6
• Iframe 4
• Page-list 4

Newest

• webvitaly page-list Page-list <= 6.2 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Disclosure via Shortcode Attributes CVE-2026-9008 4.3 MediumJune 6, 2026
• webvitaly extra shortcodes WordPress Extra Shortcodes plugin <= 2.2 - Cross Site Scripting (XSS) vulnerability CVE-2025-62111 6.5 MediumDecember 31, 2025
• webvitaly login-logout WordPress Login-Logout Plugin <= 3.8 - Cross Site Scripting (XSS) Vulnerability CVE-2025-53467 5.9 MediumSeptember 22, 2025
• webvitaly page-list WordPress Page-list Plugin <= 5.8 - Cross Site Scripting (XSS) Vulnerability CVE-2025-58030 6.5 MediumSeptember 22, 2025
• webvitaly sitekit WordPress Sitekit Plugin <= 2.0 - Cross Site Scripting (XSS) Vulnerability CVE-2025-58229 6.5 MediumSeptember 22, 2025
• webvitaly search by google WordPress Search by Google Plugin <= 1.9 - Cross Site Scripting (XSS) Vulnerability CVE-2025-58832 5.9 MediumSeptember 5, 2025
• webvitaly sitekit WordPress Sitekit plugin <= 1.9 - Cross Site Scripting (XSS) Vulnerability CVE-2025-50047 6.5 MediumJune 20, 2025
• webvitaly sitekit WordPress Sitekit plugin <= 1.8 - Cross Site Scripting (XSS) Vulnerability CVE-2025-30776 6.5 MediumMarch 27, 2025
• lambertgroup magic slider WordPress Magic Slider plugin <= 1.3 - Stored Cross Site Scripting (XSS) vulnerability CVE-2024-51896 6.5 MediumNovember 19, 2024
• webvitaly page-list WordPress Page-list plugin <= 5.6 - Cross Site Scripting (XSS) vulnerability CVE-2024-47382 6.5 MediumOctober 5, 2024
• webvitaly iframe iframe <= 5.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode CVE-2023-6844 5.0 MediumMay 23, 2024
• webvitaly iframe WordPress iframe plugin <= 5.0 - Cross Site Scripting (XSS) vulnerability CVE-2024-34805 6.5 MediumMay 16, 2024
• webvitaly sitekit WordPress Sitekit plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability CVE-2024-29111 6.5 MediumMarch 19, 2024
• iframe project iframe WordPress iFrame Plugin <= 4.8 is vulnerable to Cross Site Scripting (XSS) CVE-2023-52125 6.5 MediumJanuary 5, 2024
• iframe project iframe iframe <= 4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'iframe' Shortcode CVE-2023-4919 6.4 MediumOctober 20, 2023
• sitekit project sitekit Sitekit <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sitekit_iframe' shortcode CVE-2023-5071 6.4 MediumOctober 20, 2023
• sitekit project sitekit WordPress Sitekit Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS) CVE-2023-27628 6.5 MediumSeptember 27, 2023
• page-list project page-list Page-list < 5.3 - Contributor+ Stored XSS CVE-2022-4485 5.4 MediumJanuary 23, 2023