Skip to content
OpenAdvisories

Vendor

rtowebsites

5 known vulnerabilities.

Products

AdminQuickbar 2 DynamicTags 1 PostGallery 1 Dynamic Conditions 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-14630

    AdminQuickbar <= 1.9.3 - Cross-Site Request Forgery to Settings Update

    The AdminQuickbar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.9.3. This is due to missing or incorrect nonce validation on the 'saveSettings' and 'renamePost' AJAX actions. This makes it possible fo…

    rtowebsites AdminQuickbar Web / CMS
  • Medium 6.5
    CVE-2025-22642

    WordPress Dynamic Conditions plugin <= 1.7.4 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rtowebsites Dynamic Conditions dynamicconditions allows Stored XSS.This issue affects Dynamic Conditions: from n/a through <= 1.7.4.

    rtowebsites Dynamic Conditions