Skip to content
OpenAdvisories

Vendor

ajay

16 known vulnerabilities.

Products

Contextual Related Posts 4 Knowledge Base 3 Better Search 2 Better Search – Relevant search results for WordPress 2 WebberZone Top 10 — Popular Posts 2 WebberZone Snippetz 1 WZ Followed Posts – Display what visitors are reading 1 Top 10 1
All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-110290

    WebberZone Top 10 <= 4.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'other_attributes' Block Attribute

    The WebberZone Top 10 — Popular Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'other_attributes (parsed to inject instance_id) + undeclared is_widget' parameter in all versions up to, and including, 4.5.2 due to insufficient …

    ajay WebberZone Top 10 — Popular Posts Web / CMS
  • Medium 6.4
    CVE-2026-85653

    Contextual Related Posts <= 4.4.1 - Authenticated (Author+) Stored Cross-Site Scripting via 'other_attributes' Block Parameter

    The Contextual Related Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'other_attributes' Block Parameter in all versions up to, and including, 4.4.1 due to insufficient input sanitization and output escaping. This makes it possibl…

    ajay Contextual Related Posts Web / CMS
  • Medium 6.4
    CVE-2026-2986

    Contextual Related Posts <= 4.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'other_attributes'

    The Contextual Related Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'other_attributes' parameter in versions up to, and including, 4.2.1 due to insufficient input sanitization and output escaping. This makes it possible for …

    ajay Contextual Related Posts Web / CMS
  • Medium 5.3
    CVE-2026-32565

    WordPress Contextual Related Posts plugin < 4.2.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Ajay Contextual Related Posts contextual-related-posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contextual Related Posts: from n/a through < 4.2.2.

    ajay Contextual Related Posts
  • Medium 5.9
    CVE-2026-24938

    WordPress Better Search plugin <= 4.2.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ajay Better Search better-search allows Stored XSS.This issue affects Better Search: from n/a through <= 4.2.1.

    ajay Better Search
  • Medium 4.4
    CVE-2025-7431 Public exploit

    Knowledge Base <= 2.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Slug

    The Knowledge Base plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin slug setting in all versions up to, and including, 2.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated a…

    ajay Knowledge Base Web / CMS
  • Medium 6.4
    CVE-2025-5533

    Knowledge Base <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Knowledge Base plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'kbalert' shortcode in all versions up to, and including, 2.3.0 due to insufficient input sanitization and output escaping on user supplied attributes. This …

    ajay Knowledge Base Web / CMS
  • Medium 6.5
    CVE-2025-47509

    WordPress Top 10 plugin <= 4.1.0 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ajay Top 10 top-10 allows Stored XSS.This issue affects Top 10: from n/a through <= 4.1.0.

    ajay Top 10
  • Medium 6.5
    CVE-2025-47507

    WordPress Better Search plugin <= 4.1.0 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ajay Better Search better-search allows DOM-Based XSS.This issue affects Better Search: from n/a through <= 4.1.0.

    ajay Better Search
  • Medium 6.5
    CVE-2025-47506

    WordPress Contextual Related Posts plugin <= 4.0.2 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ajay Contextual Related Posts contextual-related-posts allows DOM-Based XSS.This issue affects Contextual Related Posts: from n/a through <= 4.0.2.

    ajay Contextual Related Posts
  • Medium 6.4
    CVE-2025-4171

    WZ Followed Posts – Display what visitors are reading <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The WZ Followed Posts – Display what visitors are reading plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wfp' shortcode in all versions up to, and including, 3.1.0 due to insufficient input sanitization and output escaping…

    ajay WZ Followed Posts – Display what visitors are reading Web / CMS
  • Medium 6.5
    CVE-2025-31874

    WordPress WebberZone Snippetz plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ajay WebberZone Snippetz add-to-all allows Stored XSS.This issue affects WebberZone Snippetz: from n/a through <= 2.1.1.

    ajay WebberZone Snippetz
  • Medium 6.5
    CVE-2024-51677

    WordPress Knowledge Base plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ajay Knowledge Base knowledgebase allows Stored XSS.This issue affects Knowledge Base: from n/a through <= 2.2.0.

    ajay Knowledge Base
  • Medium 4.3
    CVE-2020-36761

    Top 10 <= 2.9.4 - Cross-Site Request Forgery Bypass

    The Top 10 plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.10.4. This is due to missing or incorrect nonce validation on the tptn_export_tables() function. This makes it possible for unauthenticated attacke…

    ajay WebberZone Top 10 — Popular Posts Web / CMS
  • Medium 4.3
    CVE-2021-4400

    Better Search <= 2.5.2 - Cross-Site Request Forgery Bypass

    The Better Search plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.5.2. This is due to missing or incorrect nonce validation on the bsearch_process_settings_import() and bsearch_process_settings_export() fun…

    ajay Better Search – Relevant search results for WordPress Web / CMS