WordPress Contact Form 7 Widget plugin <= 1.2.1 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by Peter Thaleikis in WordPress Plugin HT Contact Form 7 versions = 1.2.1...

WordPress Picture Gallery plugin <= 1.5.19 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin Picture Gallery versions = 1.5.19...

WordPress Tamara Checkout plugin < 1.9.9.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Peter Thaleikis Patchstack Alliance in WordPress Plugin Tamara Checkout versions 1.9.9.1...

CVE-2025-23547

CVE-2025-23547 describes a Reflected XSS in the LH Login Page (Peter Shaw). Affected product: LH Login Page, versions up to 2.14. The vulnerability is due to improper input neutralization during web page generation. CVSS 3.1 vector indicates Network attack, low confidentiality/integrity/availabil...

The First Password on the Internet

It was created in 1973 by Peter Kirstein: So from the beginning I put password protection on my gateway. This had been done in such a way that even if UK users telephoned directly into the communications computer provided by Darpa in UCL, they would require a password. In fact this was the first...

WordPress Perfect Portal Widgets plugin <= 3.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin Perfect Portal Widgets versions = 3.0.3...

WordPress AI Scribe plugin <= 2.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peter Thaleikis in WordPress Plugin AI Scribe versions = 2.5...

WordPress GS Insever Portfolio plugin <= 1.4.5 - Missing Authorization to Authenticated (Subscriber+) CSS Injection vulnerability

Missing Authorization to Authenticated Subscriber+ CSS Injection vulnerability discovered by Peter Thaleikis in WordPress Plugin GS Insever Portfolio versions = 1.4.5...

WordPress ChatBot Conversational Forms plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Peter Thaleikis Patchstack Alliance in WordPress Plugin Conversational Forms for ChatBot versions = 1.4.2...

WordPress BP Profile Shortcodes Extra plugin <= 2.6.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Peter Thaleikis Patchstack Alliance in WordPress Plugin BP Profile Shortcodes Extra versions = 2.6.0...

WordPress Slotti Ajanvaraus plugin <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin Slotti Ajanvaraus versions = 1.3.1...

WordPress Chative Live chat and Chatbot plugin <= 1.1 - Cross-Site Request Forgery via add_chative_widget_action Function vulnerability

Cross-Site Request Forgery via addchativewidgetaction Function vulnerability discovered by Peter Thaleikis in WordPress Plugin Chative Live chat and Chatbot versions = 1.1...

WordPress Arconix Shortcodes plugin <= 2.1.14 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Peter Thaleikis Patchstack Alliance in WordPress Plugin Arconix Shortcodes versions = 2.1.14...

WordPress Pronamic Google Maps plugin <= 2.3.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Peter Thaleikis Patchstack Alliance in WordPress Plugin Pronamic Google Maps versions = 2.3.2...

WordPress Category Post Slider plugin <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin Category Post Slider versions = 1.4...

WordPress HTML Forms plugin <= 1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Peter Thaleikis Patchstack Alliance in WordPress Plugin HTML Forms versions = 1.4.1...

WordPress Kredeum NFTs plugin <= 1.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin Kredeum NFTs versions = 1.6.9...

WordPress Themify Store Locator plugin <= 1.1.9 - Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery vulnerability discovered by Peter Thaleikis in WordPress Plugin Themify Store Locator versions = 1.1.9...

WordPress Cognito Forms plugin <= 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via id Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin Cognito Forms versions = 2.0.6...

WordPress SQL Chart Builder plugin <= 2.3.7.1 - Authenticated (Contributor+) SQL Injection vulnerability

Authenticated Contributor+ SQL Injection vulnerability discovered by Peter Thaleikis in WordPress Plugin SQL Chart Builder versions = 2.3.7.1...