Skip to content
OpenAdvisories

Vendor

avimegladon

3 known vulnerabilities.

Products

WP Register Profile With Shortcode 2 Custom Post Type Attachment 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-4593

    WP Register Profile With Shortcode <= 3.6.2 - Authenticated (Contributor+) Sensitive Information Exposure

    The WP Register Profile With Shortcode plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.2 via the 'rp_user_data' shortcode. This makes it possible for authenticated attackers, with Contributor-leve…

    avimegladon WP Register Profile With Shortcode Web / CMS
  • Medium 6.4
    CVE-2024-4546

    Custom Post Type Attachment <= 3.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via pdf_attachment Shortcode

    The Custom Post Type Attachment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'pdf_attachment' shortcode in all versions up to, and including, 3.4.5 due to insufficient input sanitization and output escaping on user suppli…

    avimegladon Custom Post Type Attachment Web / CMS