CVE-2021-34619

creationtimestamp| type| source ---|---|--- 2026-06-19 12:48:06+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/560975b7-612c-4b84-9b6a-36796c7450d9 2026-06-23 14:04:03+00:00| exploited|...

Splash Header < 1.20.8 - Authenticated Stored Cross-Site Scripting (XSS)

The plugin doesn't sanitise and escape some of its settings while outputting them in the admin dashboard, leading to an authenticated Stored Cross-Site Scripting issue. Put the following payload in the "Note title" and "Note message" settings of the plugin: "alert/XSS-Title/ and alert/XSS-Msg/ Th...

CVE-2021-34619

The CVE-2021-34619 issue affects the WordPress WooCommerce Stock Manager plugin up to version 2.5.7, where the import-export.php path lacks nonce handling and file validation, enabling Cross-Site Request Forgery that can lead to Arbitrary File Upload. Impact is high (potential code upload and exe...