Skip to content
OpenAdvisories

Vendor

Jeff Starr

19 known vulnerabilities.

Products

User Submitted Posts 3 Simple Ajax Chat (WordPress plugin) 3 Dashboard Widgets Suite 2 Prismatic 2 Theme Switcha 1 Simple Download Counter 1 User Submitted Posts – Enable Users to Submit Posts from the Front End 1 Simple Ajax Chat 1 BBQ Pro 1 Contact Form X (WordPress plugin) 1 Head Meta Data 1 Simple Statistics for Feeds 1 Simple Blog Stats 1
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-62084

    WordPress User Submitted Posts plugin <= 20260810 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeff Starr User Submitted Posts allows Stored XSS. This issue affects User Submitted Posts: from n/a through 20260810.

    Jeff Starr User Submitted Posts
  • Medium 5.3
    CVE-2026-3075

    WordPress Simple Ajax Chat plugin <= 20251121 - Sensitive Data Exposure vulnerability

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Jeff Starr Simple Ajax Chat simple-ajax-chat allows Retrieve Embedded Sensitive Data.This issue affects Simple Ajax Chat: from n/a through <= 20251121.

    Jeff Starr Simple Ajax Chat
  • Medium 4.7
    CVE-2025-68509

    WordPress User Submitted Posts plugin <= 20251121 - Open Redirection vulnerability

    URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Jeff Starr User Submitted Posts user-submitted-posts allows Phishing.This issue affects User Submitted Posts: from n/a through <= 20251121.

    Jeff Starr User Submitted Posts
  • Medium 5.9
    CVE-2025-66081

    WordPress Head Meta Data plugin <= 20250327 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeff Starr Head Meta Data head-meta-data allows Stored XSS.This issue affects Head Meta Data: from n/a through <= 20250327.

    Jeff Starr Head Meta Data
  • Medium 4.3
    CVE-2025-57892

    WordPress Simple Statistics for Feeds Plugin <= 20250322 - Cross Site Request Forgery (CSRF) Vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Jeff Starr Simple Statistics for Feeds simple-feed-stats allows Cross Site Request Forgery.This issue affects Simple Statistics for Feeds: from n/a through <= 20250322.

    Jeff Starr Simple Statistics for Feeds
  • Medium 6.5
    CVE-2025-47499

    WordPress Simple Blog Stats plugin <= 20250416 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeff Starr Simple Blog Stats simple-blog-stats allows Stored XSS.This issue affects Simple Blog Stats: from n/a through <= 20250416.

    Jeff Starr Simple Blog Stats
  • Medium 6.5
    CVE-2025-46240

    WordPress Simple Download Counter plugin <= 2.2 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeff Starr Simple Download Counter simple-download-counter allows Stored XSS.This issue affects Simple Download Counter: from n/a through <= 2.2.

    Jeff Starr Simple Download Counter
  • Medium 6.5
    CVE-2025-46239

    WordPress Theme Switcha plugin <= 3.4 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeff Starr Theme Switcha theme-switcha allows Stored XSS.This issue affects Theme Switcha: from n/a through <= 3.4.

    Jeff Starr Theme Switcha Web / CMS
  • Medium 6.5
    CVE-2023-7251

    WordPress User Submitted Posts plugin <= 20230901 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeff Starr User Submitted Posts allows Stored XSS.This issue affects User Submitted Posts: from n/a through 20230901.

    Jeff Starr User Submitted Posts
  • Medium 5.9
    CVE-2023-49743

    WordPress Dashboard Widgets Suite Plugin <= 3.4.1 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeff Starr Dashboard Widgets Suite allows Stored XSS.This issue affects Dashboard Widgets Suite: from n/a through 3.4.1.

    Jeff Starr Dashboard Widgets Suite
  • Medium 5.9
    CVE-2023-26517

    WordPress Dashboard Widgets Suite Plugin <= 3.2.1 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Jeff Starr Dashboard Widgets Suite plugin <= 3.2.1 versions.

    Jeff Starr Dashboard Widgets Suite
  • Medium 5.4
    CVE-2022-27850

    WordPress Simple Ajax Chat plugin <= 20220115 - Multiple Cross-Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) in Simple Ajax Chat (WordPress plugin) <= 20220115 allows an attacker to clear the chat log or delete a chat message.

    Jeff Starr Simple Ajax Chat (WordPress plugin) Web / CMS
  • Medium 5.3
    CVE-2022-27849

    WordPress Simple Ajax Chat plugin <= 20220115 - Sensitive Information Disclosure vulnerability

    Sensitive Information Disclosure (sac-export.csv) in Simple Ajax Chat (WordPress plugin) <= 20220115

    Jeff Starr Simple Ajax Chat (WordPress plugin) Web / CMS
  • Medium 4.7
    CVE-2022-25601

    WordPress Contact Form X plugin <= 2.4 - Reflected Cross-Site Scripting (XSS) vulnerability

    Reflected Cross-Site Scripting (XSS) vulnerability affecting parameter &tab discovered in Contact Form X WordPress plugin (versions <= 2.4).

    Jeff Starr Contact Form X (WordPress plugin) Web / CMS