Skip to content
OpenAdvisories

Vendor

Lester Chan

4 known vulnerabilities.

Products

WP-Polls 1 WP-DownloadManager 1 WP-ShowHide 1 WP-Stats 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.9
    CVE-2025-68081

    WordPress WP-Polls plugin <= 2.77.3 - Cross Site Scripting (XSS) vulnerability

    Administrator Cross Site Scripting (XSS) in WP-Polls <= 2.77.3 versions.

    Lester Chan WP-Polls
  • Medium 6.5
    CVE-2025-67541

    WordPress WP-ShowHide plugin <= 1.05 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Lester Chan WP-ShowHide wp-showhide allows Stored XSS.This issue affects WP-ShowHide: from n/a through <= 1.05.

    Lester Chan WP-ShowHide