Skip to content
OpenAdvisories

Vendor

Barn2 Media

3 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.4

    Posts Table with Search & Sort <= 1.4.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'date_format' Shortcode Attribute

    The Posts Table with Search & Sort plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'date_format' parameter in all versions up to, and including, 1.4.14 due to insufficient input sanitization and output escaping. This makes it possibl…

  • Medium 5.3
    CVE-2025-11174 Public exploit

    Document Library Lite <= 1.1.6 - Missing Authorization to Sensitive Information Exposure

    The Document Library Lite plugin for WordPress is vulnerable to Improper Authorization in all versions up to, and including, 1.1.6. This is due to the plugin exposing an unauthenticated AJAX action dll_load_posts which returns a JSON table of document data wi…