Skip to content
OpenAdvisories

Vendor

Nitesh

4 known vulnerabilities.

Products

Ultimate Auction 3 Awesome Timeline 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.4
    CVE-2025-68084

    WordPress Ultimate Auction plugin <= 4.3.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Nitesh Ultimate Auction ultimate-auction allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Auction : from n/a through <= 4.3.3.

    Nitesh Ultimate Auction
  • Medium 5.3
    CVE-2025-66125

    WordPress Ultimate Auction plugin <= 4.3.3 - Sensitive Data Exposure vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in Nitesh Ultimate Auction ultimate-auction allows Retrieve Embedded Sensitive Data.This issue affects Ultimate Auction : from n/a through <= 4.3.3.

    Nitesh Ultimate Auction
  • Medium 6.5
    CVE-2025-23747

    WordPress Awesome Timeline plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nitesh Awesome Timeline awesome-timeline allows Stored XSS.This issue affects Awesome Timeline: from n/a through <= 1.0.1.

    Nitesh Awesome Timeline
  • Medium 4.3
    CVE-2024-37543

    WordPress Ultimate Auction plugin <= 4.2.5 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Nitesh Ultimate Auction ultimate-auction allows Cross Site Request Forgery.This issue affects Ultimate Auction : from n/a through <= 4.2.5.

    Nitesh Ultimate Auction