Threat Entry Updated 2025-04-17

CVE-2025-39431 - Allows Stored Xss Plugin

Cross-Site Request Forgery (CSRF) vulnerability in Aaron Forgue Amazon Showcase WordPress Plugin allows Stored XSS. This issue affects Amazon Showcase WordPress Plugin: from n/a through 2.2.

PLUGIN Allows Stored Xss

CVE-2025-39431

HIGH CVSS 7.1 2025-04-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2025-02-10

CVE-2024-52478 - Allows Stored Xss Theme

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ben Marshall Jobify - Job Board WordPress Theme allows Stored XSS.This issue affects Jobify - Job Board WordPress Theme: from n/a through 4.2.3.

THEME Allows Stored Xss

CVE-2024-52478

MEDIUM CVSS 6.5 2024-12-02

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-11-21

CVE-2024-34561 - Allows Stored Xss Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Creative interactive media 3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook WordPress Plugin allows Stored XSS.This issue affects 3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook WordPress Plugin: from n/a through 3.71.

PLUGIN Allows Stored Xss

CVE-2024-34561

MEDIUM CVSS 5.9 2024-05-08

Risk Score

Open Full Technical Breakdown