Threat Database

Threat Entry Updated 2026-06-17

WordPress Tooltips - Cross-Site Scripting (XSS) (CVE-2025-63005)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tomas WordPress Tooltips wordpress-tooltips allows Stored XSS.This issue affects WordPress Tooltips: from n/a through

PLUGIN WordPress Tooltips

CVE-2025-63005

MEDIUM CVSS 6.5 2025-12-31

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

WordPress Tooltips - Cross-Site Scripting (XSS) (CVE-2024-31285)

Cross-Site Request Forgery (CSRF) vulnerability in Tooltip WordPress Tooltips allows Stored XSS.This issue affects WordPress Tooltips: from n/a through 9.5.3.

PLUGIN WordPress Tooltips

CVE-2024-31285

HIGH CVSS 7.1 2024-04-11

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

WordPress Tooltips - SQL Injection (CVE-2024-30243)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tomas WordPress Tooltips.This issue affects WordPress Tooltips: from n/a before 9.4.5.

PLUGIN WordPress Tooltips

CVE-2024-30243

HIGH CVSS 8.5 2024-03-28

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Wordpress Tooltips - Cross-Site Request Forgery (CSRF) (CVE-2023-25985)

Cross-Site Request Forgery (CSRF) vulnerability in Tomas | Docs | FAQ | Premium Support WordPress Tooltips.This issue affects WordPress Tooltips: from n/a through 8.2.5.

PLUGIN Wordpress Tooltips

CVE-2023-25985

MEDIUM CVSS 4.3 2023-11-18

Risk Score

Open Full Technical Breakdown