Skip to content
OpenAdvisories

Vendor

a3rev

8 known vulnerabilities.

Products

a3 Lazy Load 2 Compare Products for WooCommerce 2 Product Sort and Display for WooCommerce 1 WP Email Template 1 Contact Us Page – Contact People 1 Page View Count 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-6427

    a3 Lazy Load <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Element

    The a3 Lazy Load plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.7.6 This is due to a regex bug in the _filter_videos() method that breaks HTML attribute quoting when processing crafted <video> element…

    a3rev a3 Lazy Load Web / CMS
  • Medium 6.4
    CVE-2025-9873

    a3 Lazy Load <= 2.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The a3 Lazy Load plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.7.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated att…

    a3rev a3 Lazy Load Web / CMS
  • Medium 6.4
    CVE-2025-5123

    Contact Us Page – Contact People <= 3.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via style Parameter

    The Contact Us Page – Contact People plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘style’ parameter in all versions up to, and including, 3.7.4 due to insufficient input sanitization and output escaping. This makes it possible for…

    a3rev Contact Us Page – Contact People Web / CMS
  • Medium 6.1
    CVE-2024-12435

    Compare Products for WooCommerce <= 3.2.1 - Reflected Cross-Site Scripting

    The Compare Products for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘s_feature’ parameter in all versions up to, and including, 3.2.1 due to insufficient input sanitization and output escaping. This makes it possi…

    a3rev Compare Products for WooCommerce Web / CMS
  • Medium 6.5
    CVE-2024-1807

    Product Sort and Display for WooCommerce <= 2.4.1 - Missing Authorization

    The Product Sort and Display for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the psad_update_product_cat_custom_meta_ajax function in all versions up to, and including, 2.4.1. This m…

    a3rev Product Sort and Display for WooCommerce Web / CMS
  • Medium 5.4
    CVE-2019-25144

    WP HTML Mail < 2.2.11 - HTML injection

    The WP HTML Mail plugin for WordPress is vulnerable to HTML injection in versions up to, and including, 2.2.10 due to insufficient input sanitization. This makes it possible for unauthenticated attackers to inject arbitrary HTML in pages that execute if they …

    a3rev WP Email Template Web / CMS