Skip to content
OpenAdvisories

Vendor

aviplugins.com

8 known vulnerabilities.

Products

WP Register Profile With Shortcode 2 Login Widget With Shortcode 1 Contact Form With Shortcode 1 WP Easy Poll 1 Custom Post Type Attachment 1 WP Booking 1 Thumbnail Editor 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-62907

    WordPress Custom Post Type Attachment plugin <= 3.4.6 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in aviplugins.com Custom Post Type Attachment custom-post-type-pdf-attachment allows Stored XSS.This issue affects Custom Post Type Attachment: from n/a through…

    aviplugins.com Custom Post Type Attachment
  • Medium 6.5
    CVE-2025-53282

    WordPress Thumbnail Editor plugin <= 2.3.3 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in aviplugins.com Thumbnail Editor thumbnail-editor allows Stored XSS.This issue affects Thumbnail Editor: from n/a through <= 2.3.3.

    aviplugins.com Thumbnail Editor
  • Medium 6.5
    CVE-2025-50042

    WordPress WP Register Profile With Shortcode plugin <= 3.6.3 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in aviplugins.com WP Register Profile With Shortcode wp-register-profile-with-shortcode allows Stored XSS.This issue affects WP Register Profile With Shortcode:…

    aviplugins.com WP Register Profile With Shortcode
  • Medium 4.7
    CVE-2024-54255

    WordPress Login Widget With Shortcode plugin <= 6.1.2 - Open Redirection vulnerability

    URL Redirection to Untrusted Site ('Open Redirect') vulnerability in aviplugins.com Login Widget With Shortcode login-sidebar-widget allows Phishing.This issue affects Login Widget With Shortcode: from n/a through <= 6.1.2.

    aviplugins.com Login Widget With Shortcode
  • Medium 4.7
    CVE-2024-35297

    Cross-site scripting vulnerability exists in WP Booking versions prior to 2.4.5. If this vulnerability is exploited, an…

    aviplugins.com WP Booking
  • Medium 5.9
    CVE-2023-23818

    WordPress WP Register Profile With Shortcode Plugin <= 3.5.7 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Aviplugins.Com WP Register Profile With Shortcode plugin <= 3.5.7 versions.

    aviplugins.com WP Register Profile With Shortcode