Skip to content
OpenAdvisories

Vendor

cybio

4 known vulnerabilities.

Products

GravatarLocalCache 1 TinyCode 1 Floatbox Plus 1 Gallery Widget 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.5
    CVE-2025-28969

    WordPress Gallery Widget plugin <= 1.2.1 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in cybio Gallery Widget gallery-widget allows SQL Injection.This issue affects Gallery Widget: from n/a through <= 1.2.1.

    cybio Gallery Widget
  • High 7.1
    CVE-2025-23901

    WordPress GravatarLocalCache plugin <= 1.1.2 - CSRF to Stored XSS vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in cybio GravatarLocalCache gravatarlocalcache allows Cross Site Request Forgery.This issue affects GravatarLocalCache: from n/a through <= 1.1.2.

    cybio GravatarLocalCache
  • High 7.1
    CVE-2025-23617

    WordPress Floatbox Plus plugin <= 1.4.4 - CSRF to Stored XSS vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in cybio Floatbox Plus floatbox-plus allows Stored XSS.This issue affects Floatbox Plus: from n/a through <= 1.4.4.

    cybio Floatbox Plus