Skip to content
OpenAdvisories

Vendor

clevelandwebdeveloper

3 known vulnerabilities.

Products

Spacer 1 Smart App Banners 1 Hide My Site 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2025-13841

    Smart App Banners <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'size' and 'verticalalign' Shortcode Attributes

    The Smart App Banners plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'size' and 'verticalalign' parameters of the 'app-store-download' shortcode in all versions up to, and including, 1.2 due to insufficient input sanitization and ou…

    clevelandwebdeveloper Smart App Banners Web / CMS
  • Medium 4.3
    CVE-2024-5880

    Hide My Site <= 2.2 - Unauthenticated Information Exposure

    The Hide My Site plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2 due to the plugin not restricting access to the REST API when password protection is enabled. This makes it possible for unauthenti…

    clevelandwebdeveloper Hide My Site Web / CMS