Skip to content
OpenAdvisories

Vendor

DeBAAT

3 known vulnerabilities.

Products

WP Media Category Management 2 WP-GraphViz 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-58870

    WordPress WP-GraphViz Plugin <= 1.5.1 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DeBAAT WP-GraphViz wp-graphviz allows DOM-Based XSS.This issue affects WP-GraphViz: from n/a through <= 1.5.1.

    DeBAAT WP-GraphViz
  • Medium 6.5
    CVE-2025-0865

    WP Media Category Management 2.0 - 2.3.3 - Cross-Site Request Forgery to Settings Update

    The WP Media Category Management plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions 2.0 to 2.3.3. This is due to missing or incorrect nonce validation on the wp_mcm_handle_action_settings() function. This makes it possible for unauth…

    DeBAAT WP Media Category Management Web / CMS