Skip to content
OpenAdvisories

Vendor

colorlibplugins

4 known vulnerabilities.

Products

FancyBox for WordPress 2 Simple Custom Post Order 1 Coming Soon & Maintenance Mode by Colorlib 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.4
    CVE-2024-5020

    Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library

    Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled FancyBox JavaScript library (versions 1.3.4 to 3.5.7) in various versions due to insufficient input sanitization and output escaping on user supplied attribu…

    smub 10web jetmonsters posimyththemes Web / CMS
  • Medium 4.3
    CVE-2024-49321

    WordPress Simple Custom Post Order plugin <= 2.5.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in colorlibplugins Simple Custom Post Order simple-custom-post-order allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Custom Post Order: from n/a through <= 2.5.7.

    colorlibplugins Simple Custom Post Order
  • Medium 4.4
    CVE-2024-0662

    The FancyBox for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in vers…

    colorlibplugins FancyBox for WordPress Web / CMS
  • Medium 5.3
    CVE-2024-1473

    Coming Soon & Maintenance Mode by Colorlib <= 1.0.99 - Information Exposure

    The Coming Soon & Maintenance Mode by Colorlib plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.99 via the REST API. This makes it possible for unauthenticated attackers to obtain post and page contents via …

    colorlibplugins Coming Soon & Maintenance Mode by Colorlib Web / CMS