Dartiss
8 CVEs across 6 Dartiss products. Browse Dartiss vulnerabilities, severities, and proof-of-concept exploits.
Dartiss products with known CVEs
Dartiss CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-49466 | Medium | 6.5 | 2026-08-12 | Draft List is a WordPress plugin to manage and promote unpublished content. Versions 2.6.3 and below are vulnerable to stored Cross-Site Scripting (XSS) in the… |
CVE-2026-48093 | Medium | 6.5 | 2026-08-07 | The Code Embed WordPress plugin prior to version 2.6.1 is vulnerable to stored Cross-Site Scripting (XSS) through the external URL embed feature in post conten… |
CVE-2026-48094 | | | 2026-08-07 | The ShareOpenly WordPress plugin prior to version 1.2.1 contains a Cross-Site Scripting vulnerability caused by the absence of WordPress's `esc_url()` escaping… |
CVE-2026-9104 | Medium | 6.4 | 2026-05-22 | The Draft List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Draft Post Title in all versions up to, and including, 2.6.3 due to insuff… |
CVE-2026-6809 | Medium | 6.4 | 2026-04-28 | The Social Post Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Threads embed handler in all versions up to, and including, 2.0… |
CVE-2026-4006 | Medium | 6.4 | 2026-03-19 | The Simple Draft List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name' post meta (Custom Field) in all versions up to a… |
CVE-2026-2512 | Medium | 6.4 | 2026-03-18 | The Code Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom field meta values in all versions up to, and including, 2.5.1. This… |
CVE-2025-11197 | Medium | 6.4 | 2025-10-11 | The Draft List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'drafts' shortcode in all versions up to, and including, 2.6… |
CVE-2025-10181 | Medium | 6.4 | 2025-09-20 | The Draft List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'drafts' shortcode in all versions up to, and including, 2.6… |
CVE-2024-10814 | Medium | 6.4 | 2024-11-09 | The Code Embed plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.5 via the ce_get_file() function. This… |
CVE-2024-8804 | Medium | 6.4 | 2024-10-04 | The Code Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's script embed functionality in all versions up to, and includi… |