Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-11-13
Opening Hours - Security Vulnerability (CVE-2026-125815)
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Noah Hearle We’re Open! opening-hours allows Code Injection.This issue affects We’re Open!: from n/a through 2.8.
PLUGIN
Opening Hours
CVE-2026-125815
Risk Score
Threat Entry
Updated 2026-10-26
Opening Hours - Security Vulnerability (CVE-2026-112869)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noah Hearle We’re Open! opening-hours allows Reflected XSS.This issue affects We’re Open!: from n/a through 2.6.
PLUGIN
Opening Hours
CVE-2026-112869
Risk Score
Threat Entry
Updated 2026-06-17
Opening Hours - Broken Access Control (CVE-2023-25067)
Missing Authorization vulnerability in Noah Hearle, Design Extreme We’re Open! allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects We’re Open!: from n/a through 1.45.
PLUGIN
Opening Hours
CVE-2023-25067
Risk Score
Threat Entry
Updated 2026-06-17
Opening Hours - Cross-Site Scripting (XSS) (CVE-2022-4752)
The Opening Hours WordPress plugin through 2.3.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
PLUGIN
Opening Hours
CVE-2022-4752
Risk Score