Skip to content
OpenAdvisories

Vendor

gopiplushotmailcom

8 known vulnerabilities.

Products

Jquery news ticker 2 Wp tabber widget 2 Popup with fancybox 1 Anything Popup 1 Vertical marquee plugin 1 Scroll rss excerpt 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.1
    CVE-2025-68892

    WordPress Scroll rss excerpt plugin <= 5.0 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gopiplus@hotmail.com Scroll rss excerpt scroll-rss-excerpt allows Reflected XSS.This issue affects Scroll rss excerpt: from n/a through <= 5.0.

    gopiplushotmailcom Scroll rss excerpt
  • High 8.5
    CVE-2025-53468

    WordPress Wp tabber widget Plugin <= 4.0 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus@hotmail.com Wp tabber widget wp-tabber-widget allows SQL Injection.This issue affects Wp tabber widget: from n/a through <= 4.0.

    gopiplushotmailcom Wp tabber widget
  • High 7.1
    CVE-2025-39397

    WordPress Anything Popup plugin <= 7.3 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gopiplus@hotmail.com Anything Popup anything-popup allows Reflected XSS.This issue affects Anything Popup: from n/a through <= 7.3.

    gopiplushotmailcom Anything Popup
  • High 8.8
    CVE-2023-5465

    Popup with fancybox <= 3.5 - Authenticated (Subscriber+) SQL Injection via Shortcode

    The Popup with fancybox plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 3.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL que…

    gopiplushotmailcom Popup with fancybox Web / CMS
  • High 8.8
    CVE-2023-5436

    Vertical marquee plugin <= 7.1 - Authenticated (Subscriber+) SQL Injection via Shortcode

    The Vertical marquee plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 7.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.…

    gopiplushotmailcom Vertical marquee plugin Web / CMS
  • High 8.8
    CVE-2023-5430

    Jquery news ticker <= 3.0 - Authenticated (Subscriber+) SQL Injection via Shortcode

    The Jquery news ticker plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 3.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL quer…

    gopiplushotmailcom Jquery news ticker Web / CMS