Skip to content
OpenAdvisories

Vendor

bnielsen

3 known vulnerabilities.

Products

Custom Word Cloud 1 Affiliate Disclosure Statement 1 Indeed API 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2025-8317

    Custom Word Cloud <= 0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via angle Parameter

    The Custom Word Cloud plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘angle’ parameter in all versions up to, and including, 0.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated at…

    bnielsen Custom Word Cloud Web / CMS
  • Medium 4.3
    CVE-2025-25103

    WordPress Indeed API Plugin <= 0.5 - CSRF to Settings Change vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in bnielsen Indeed API indeed-api allows Cross Site Request Forgery.This issue affects Indeed API: from n/a through <= 0.5.

    bnielsen Indeed API