Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-06-17
Simple Spoiler - Cross-Site Scripting (XSS) (CVE-2025-31020)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Webliberty Simple Spoiler simple-spoiler allows Stored XSS.This issue affects Simple Spoiler: from n/a through
PLUGIN
Simple Spoiler
CVE-2025-31020
Risk Score
Threat Entry
Updated 2026-06-17
The Simple Spoiler - Security Vulnerability (CVE-2024-8479)
The The Simple Spoiler plugin for WordPress is vulnerable to arbitrary shortcode execution in versions 1.2 to 1.3. This is due to the plugin adding the filter add_filter('comment_text', 'do_shortcode'); which will run all shortcodes in comments. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.
PLUGIN
The Simple Spoiler
CVE-2024-8479
Risk Score
Threat Entry
Updated 2026-06-17
Simple Spoiler - Cross-Site Scripting (XSS) (CVE-2024-35639)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Webliberty Simple Spoiler simple-spoiler.This issue affects Simple Spoiler: from n/a through
PLUGIN
Simple Spoiler
CVE-2024-35639
Risk Score