Skip to content
OpenAdvisories

Vendor

rafasashi

6 known vulnerabilities.

Products

User Session Synchronizer 2 Language Switcher 1 Custom New User Notification 1 SVG Captcha 1 Todo Custom Field 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.1
    CVE-2025-32612

    WordPress User Session Synchronizer plugin <= 1.4.0 - CSRF to Stored XSS vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in rafasashi User Session Synchronizer user-session-synchronizer allows Stored XSS.This issue affects User Session Synchronizer: from n/a through <= 1.4.0.

    rafasashi User Session Synchronizer
  • High 7.1
    CVE-2024-49648

    WordPress SVG Captcha plugin <= 1.0.11 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rafasashi SVG Captcha svg-captcha allows Reflected XSS.This issue affects SVG Captcha: from n/a through <= 1.0.11.

    rafasashi SVG Captcha
  • High 7.1
    CVE-2024-49642

    WordPress Todo Custom Field plugin <= 3.0.4 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rafasashi Todo Custom Field todo-custom-field allows Reflected XSS.This issue affects Todo Custom Field: from n/a through <= 3.0.4.

    rafasashi Todo Custom Field