Skip to content
OpenAdvisories

Vendor

helgatheviking

2 known vulnerabilities.

Products

KIA Subtitle 1 Radio Buttons for Taxonomies 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-7509

    KIA Subtitle <= 4.0.1 - [Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')]

    The KIA Subtitle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `the-subtitle` shortcode `before` and `after` attributes in all versions up to, and including, 4.0.1. This is due to insufficient input sanitization and output…

    helgatheviking KIA Subtitle Web / CMS
  • Medium 4.3
    CVE-2020-36740

    Radio Buttons for Taxonomies <= 2.0.5 - Cross-Site Request Forgery Bypass

    The Radio Buttons for Taxonomies plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0.5. This is due to missing or incorrect nonce validation on the save_single_term() function. This makes it possible for unau…

    helgatheviking Radio Buttons for Taxonomies Web / CMS