Skip to content
OpenAdvisories

Vendor

jconti

3 known vulnerabilities.

Products

Payment Gateway for Redsys & WooCommerce Lite 1 VideoZen 1 Link Shield 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.4
    CVE-2026-6439

    VideoZen <= 1.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'VideoZen available subtitles languages' Field

    The VideoZen plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 1.0.1. This is due to insufficient input sanitization and output escaping in the videozen_conf() function. The 'lang' POST parameter is stored direc…

    jconti VideoZen Web / CMS
  • Medium 6.1
    CVE-2025-5926

    Link Shield <= 0.5.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting

    The Link Shield plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.5.4. This is due to missing or incorrect nonce validation on the link_shield_menu_options() function. This makes it possible for unauthent…

    jconti Link Shield Web / CMS