Skip to content
OpenAdvisories

Vendor

morehawes

3 known vulnerabilities.

Products

Waymark 1 Auction Nudge – Your eBay on Your Site 1 Plugin README Parser 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2025-8720

    Plugin README Parser <= 1.3.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via target Parameter

    The Plugin README Parser plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘target’ parameter in all versions up to, and including, 1.3.15 due to insufficient input sanitization and output escaping. This makes it possible for authentic…

    morehawes Plugin README Parser Web / CMS
  • Medium 6.1
    CVE-2024-12325

    Waymark <= 1.4.1 - Reflected Cross-Site Scripting via 'content'

    The Waymark plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘content’ parameter in all versions up to, and including, 1.4.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated att…

    morehawes Waymark Web / CMS