Skip to content
OpenAdvisories

Vendor

Chris Roberts

3 known vulnerabilities.

Products

Annie 2 Tippy 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-23886

    WordPress Annie plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chris Roberts Annie annie allows Stored XSS.This issue affects Annie: from n/a through <= 2.1.1.

    Chris Roberts Annie
  • Medium 6.5
    CVE-2023-31079

    WordPress Tippy Plugin <= 6.2.1 is vulnerable to Cross Site Scripting (XSS)

    Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Chris Roberts Tippy plugin <= 6.2.1 versions.

    Chris Roberts Tippy