Skip to content
OpenAdvisories

Vendor

helpstring

2 known vulnerabilities.

Products

Global Body Mass Index Calculator 1 Child Height Predictor by Ostheimer 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-8883

    Global Body Mass Index Calculator <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

    The Global Body Mass Index Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gbmicalc' shortcode in versions up to, and including, 1.2. This is due to insufficient input sanitization and output escaping on user-supplied sho…

    helpstring Global Body Mass Index Calculator Web / CMS
  • Medium 4.3
    CVE-2026-6400

    Child Height Predictor by Ostheimer <= 1.3 - Cross-Site Request Forgery to Settings Update via Plugin Settings Form

    The Child Height Predictor by Ostheimer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.3. This is due to missing nonce verification in the options() function, which handles plugin settings updates. The f…

    helpstring Child Height Predictor by Ostheimer Web / CMS