Skip to content
OpenAdvisories

Vendor

otacke

2 known vulnerabilities.

Products

SNORDIAN's H5PxAPIkatchu 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2025-12904 Public exploit

    SNORDIAN's H5PxAPIkatchu <= 0.4.17 - Unauthenticated Stored Cross-Site Scripting via insert_data

    The SNORDIAN's H5PxAPIkatchu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'insert_data' AJAX endpoint in all versions up to, and including, 0.4.17 due to insufficient input sanitization and output escaping. This makes it possible …

    otacke SNORDIAN's H5PxAPIkatchu Web / CMS