Skip to content
OpenAdvisories

Vendor

thom4

2 known vulnerabilities.

Products

Mindmeister Shortcode 1 WP-LESS 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.8
    CVE-2025-31550

    WordPress WP-LESS plugin <= 1.9.6 - Sensitive Data Exposure vulnerability

    Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in thom4 WP-LESS wp-less allows Retrieve Embedded Sensitive Data.This issue affects WP-LESS: from n/a through <= 1.9.6.

    thom4 WP-LESS
  • Medium 6.5
    CVE-2025-23896

    WordPress Mindmeister Shortcode plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in thom4 Mindmeister Shortcode mindmeister-shortcode allows DOM-Based XSS.This issue affects Mindmeister Shortcode: from n/a through <= 1.0.

    thom4 Mindmeister Shortcode