Skip to content
OpenAdvisories

Vendor

federicocarrara

2 known vulnerabilities.

Products

rognone 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-1451

    rognone <= 0.6.2 - Reflected Cross-Site Scripting via 'a' Parameter

    The rognone plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'a' parameter in versions up to, and including, 0.6.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to …

    federicocarrara rognone Web / CMS
  • Medium 6.1
    CVE-2026-1450

    rognone <= 0.6.2 - Reflected Cross-Site Scripting via 'mode' Parameter

    The rognone plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'mode' parameter in versions up to, and including, 0.6.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers …

    federicocarrara rognone Web / CMS