Skip to content
OpenAdvisories

Vendor

skatox

2 known vulnerabilities.

Products

JS Archive List 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-2020 Public exploit

    JS Archive List <= 6.1.7 - Authenticated (Contributor+) PHP Object Injection via 'included' Shortcode Attribute

    The JS Archive List plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.1.7 via the 'included' shortcode attribute. This is due to the deserialization of untrusted input supplied via the 'included' parameter of t…

    skatox JS Archive List Web / CMS
  • High 7.5
    CVE-2025-7670

    JS Archive List <= 6.1.5 - Unauthenticated SQL Injection via build_sql_where Function

    The JS Archive List plugin for WordPress is vulnerable to time-based SQL Injection via the build_sql_where() function in all versions up to, and including, 6.1.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on…

    skatox JS Archive List Web / CMS