Skip to content
OpenAdvisories

Vendor

JS Morisset

3 known vulnerabilities.

Products

JSM Show Post Metadata 1 JSM file_get_contents() Shortcode 1 WPSSO Core 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-58653

    WordPress JSM file_get_contents() Shortcode Plugin <= 2.7.1 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JS Morisset JSM file_get_contents() Shortcode wp-file-get-contents allows Stored XSS.This issue affects JSM file_get_contents() Shortcode: from n/a through <…

    JS Morisset JSM file_get_contents() Shortcode
  • Medium 4.3
    CVE-2025-24589

    WordPress JSM Show Post Metadata plugin <= 4.6.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in JS Morisset JSM Show Post Metadata jsm-show-post-meta allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JSM Show Post Metadata: from n/a through <= 4.6.0.

    JS Morisset JSM Show Post Metadata
  • Medium 4.3
    CVE-2024-56243

    WordPress WPSSO Core plugin <= 18.18.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in JS Morisset WPSSO Core wpsso allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPSSO Core: from n/a through <= 18.18.1.

    JS Morisset WPSSO Core