Skip to content
OpenAdvisories

Vendor

ajay

16 known vulnerabilities.

ajay at a glance

Last 12 months
5
Critical · all time
0
Exploited · all time
0
Public exploit · all time
1
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 1 vulnerability March 2026: 1 vulnerability Mar April 2026: 1 vulnerability May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 1 vulnerability Sep October 2026: 1 vulnerability November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202610
Sep 202610
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202610
Mar 202610
Feb 202610
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202510
Jun 202510
May 202540
Apr 202510
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

Contextual Related Posts 4 Knowledge Base 3 Better Search 2 Better Search – Relevant search results for WordPress 2 WebberZone Top 10 — Popular Posts 2 WebberZone Snippetz 1 WZ Followed Posts – Display what visitors are reading 1 Top 10 1
All Critical High Medium Low Exploited only Public exploit

16 results · Feed

  • Medium 6.4
    CVE-2026-110290

    WebberZone Top 10 <= 4.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'other_attributes' Block Attribute

    The WebberZone Top 10 — Popular Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'other_attributes (parsed to inject instance_id) + undeclared is_widget' parameter in all versions up to, and including, 4.5.2 due to insufficient …

    ajay WebberZone Top 10 — Popular Posts Web / CMS
  • Medium 6.4
    CVE-2026-85653

    Contextual Related Posts <= 4.4.1 - Authenticated (Author+) Stored Cross-Site Scripting via 'other_attributes' Block Parameter

    The Contextual Related Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'other_attributes' Block Parameter in all versions up to, and including, 4.4.1 due to insufficient input sanitization and output escaping. This makes it possibl…

    ajay Contextual Related Posts Web / CMS
  • Medium 6.4
    CVE-2026-2986

    Contextual Related Posts <= 4.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'other_attributes'

    The Contextual Related Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'other_attributes' parameter in versions up to, and including, 4.2.1 due to insufficient input sanitization and output escaping. This makes it possible for …

    ajay Contextual Related Posts Web / CMS
  • Medium 5.3
    CVE-2026-32565

    WordPress Contextual Related Posts plugin < 4.2.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Ajay Contextual Related Posts contextual-related-posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contextual Related Posts: from n/a through < 4.2.2.

    ajay Contextual Related Posts
  • Medium 5.9
    CVE-2026-24938

    WordPress Better Search plugin <= 4.2.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ajay Better Search better-search allows Stored XSS.This issue affects Better Search: from n/a through <= 4.2.1.

    ajay Better Search
  • Medium 4.4
    CVE-2025-7431 Public exploit

    Knowledge Base <= 2.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Slug

    The Knowledge Base plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin slug setting in all versions up to, and including, 2.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated a…

    ajay Knowledge Base Web / CMS
  • Medium 6.4
    CVE-2025-5533

    Knowledge Base <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Knowledge Base plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'kbalert' shortcode in all versions up to, and including, 2.3.0 due to insufficient input sanitization and output escaping on user supplied attributes. This …

    ajay Knowledge Base Web / CMS
  • Medium 6.5
    CVE-2025-47509

    WordPress Top 10 plugin <= 4.1.0 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ajay Top 10 top-10 allows Stored XSS.This issue affects Top 10: from n/a through <= 4.1.0.

    ajay Top 10
  • Medium 6.5
    CVE-2025-47507

    WordPress Better Search plugin <= 4.1.0 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ajay Better Search better-search allows DOM-Based XSS.This issue affects Better Search: from n/a through <= 4.1.0.

    ajay Better Search
  • Medium 6.5
    CVE-2025-47506

    WordPress Contextual Related Posts plugin <= 4.0.2 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ajay Contextual Related Posts contextual-related-posts allows DOM-Based XSS.This issue affects Contextual Related Posts: from n/a through <= 4.0.2.

    ajay Contextual Related Posts
  • Medium 6.4
    CVE-2025-4171

    WZ Followed Posts – Display what visitors are reading <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The WZ Followed Posts – Display what visitors are reading plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wfp' shortcode in all versions up to, and including, 3.1.0 due to insufficient input sanitization and output escaping…

    ajay WZ Followed Posts – Display what visitors are reading Web / CMS
  • Medium 6.5
    CVE-2025-31874

    WordPress WebberZone Snippetz plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ajay WebberZone Snippetz add-to-all allows Stored XSS.This issue affects WebberZone Snippetz: from n/a through <= 2.1.1.

    ajay WebberZone Snippetz
  • Medium 6.5
    CVE-2024-51677

    WordPress Knowledge Base plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ajay Knowledge Base knowledgebase allows Stored XSS.This issue affects Knowledge Base: from n/a through <= 2.2.0.

    ajay Knowledge Base
  • Medium 4.3
    CVE-2020-36761

    Top 10 <= 2.9.4 - Cross-Site Request Forgery Bypass

    The Top 10 plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.10.4. This is due to missing or incorrect nonce validation on the tptn_export_tables() function. This makes it possible for unauthenticated attacke…

    ajay WebberZone Top 10 — Popular Posts Web / CMS
  • Medium 4.3
    CVE-2021-4400

    Better Search <= 2.5.2 - Cross-Site Request Forgery Bypass

    The Better Search plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.5.2. This is due to missing or incorrect nonce validation on the bsearch_process_settings_import() and bsearch_process_settings_export() fun…

    ajay Better Search – Relevant search results for WordPress Web / CMS
  • High 8.8
    CVE-2021-4373

    Better Search <= 2.5.2 - Cross-Site Request Forgery to Settings Import

    The Better Search plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.5.2. This makes it possible for unauthenticated attackers to import settings via forged request granted they can trick a site administrator …

    ajay Better Search – Relevant search results for WordPress Web / CMS