Skip to content
OpenAdvisories

Vendor

goback2

3 known vulnerabilities.

Products

salavat counter Plugin 2 Logo Manager For Enamad 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-6549

    Logo Manager For Enamad <= 0.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' Shortcode Attribute

    The Logo Manager For Enamad plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' attribute of the `vc_enamad_namad`, `vc_enamad_shamed`, and `vc_enamad_custom` shortcodes in all versions up to, and including, 0.7.4 due to insuffic…

    goback2 Logo Manager For Enamad Web / CMS
  • Medium 4.4
    CVE-2026-1047

    salavat counter Plugin <= 0.9.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'image_url' Parameter

    The salavat counter Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'image_url' parameter in all versions up to, and including, 0.9.5 due to insufficient input sanitization and output escaping. This makes it possible for authe…

    goback2 salavat counter Plugin Web / CMS
  • Medium 6.1
    CVE-2024-11435

    salavat counter Plugin <= 0.9.4 - Reflected Cross-Site Scripting

    The salavat counter Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 0.9.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthe…

    goback2 salavat counter Plugin Web / CMS