CVE-2026-3907 | Medium | 6.4 | 2026-07-10 | The Hostel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wphostel-book' shortcode in all versions up to and including 1.1.7. This… |
CVE-2026-1838 | Medium | 6.1 | 2026-04-18 | The Hostel plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'shortcode_id' parameter in all versions up to, and including, 1.1.6 du… |
CVE-2025-11238 | High | 7.2 | 2025-10-25 | The Watu Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HTTP Referer header in versions less than, or equal to, 3.4.4 due to in… |
CVE-2025-10493 | Medium | 5.3 | 2025-09-18 | The Chained Quiz plugin for WordPress is vulnerable to Insecure Direct Object Reference in version 1.3.4 and below via the quiz submission and completion mecha… |
CVE-2024-4314 | Medium | 4.3 | 2024-05-14 | The Hostel plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.5.3. This is due to missing or incorrect… |
CVE-2024-0873 | Medium | 6.4 | 2024-04-09 | The Watu Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'watu-basic-chart' shortcode in all versions up to, and includ… |
CVE-2024-0872 | Medium | 4.3 | 2024-04-09 | The Watu Quiz plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.4.1 via the watu-userinfo shortcode… |
CVE-2023-4602 | Medium | 6.1 | 2023-11-15 | The Namaste! LMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'course_id' parameter in versions up to, and including, 2.6.1.1… |
CVE-2023-0968 | Medium | 6.1 | 2023-03-03 | The Watu Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘dn’, 'email', 'points', and 'date' parameters in versions up to, an… |
CVE-2022-4220 | Medium | 5.4 | 2022-12-02 | The Chained Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.2.4. This is due to missing nonce valid… |
CVE-2022-4219 | Medium | 5.4 | 2022-12-02 | The Chained Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.2.4. This is due to missing nonce valid… |
CVE-2022-4218 | Medium | 5.4 | 2022-12-02 | The Chained Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.2.4. This is due to missing nonce valid… |
CVE-2022-4217 | Medium | 5.5 | 2022-12-02 | The Chained Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'api_key' parameter in versions up to, and including, 1.3.2.2 due to… |
CVE-2022-4216 | Medium | 5.5 | 2022-12-02 | The Chained Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'facebook_appid' parameter in versions up to, and including, 1.3.2.2… |
CVE-2022-4215 | Medium | 6.1 | 2022-12-02 | The Chained Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'date' parameter on the 'chainedquiz_list' page in versions up to… |
CVE-2022-4214 | Medium | 6.1 | 2022-12-02 | The Chained Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'ip' parameter on the 'chainedquiz_list' page in versions up to… |
CVE-2022-4213 | Medium | 6.1 | 2022-12-02 | The Chained Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'dn' parameter on the 'chainedquiz_list' page in versions up to… |
CVE-2022-4212 | Medium | 6.1 | 2022-12-02 | The Chained Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'ipf' parameter on the 'chainedquiz_list' page in versions up to… |
CVE-2022-4211 | Medium | 6.1 | 2022-12-02 | The Chained Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'emailf' parameter on the 'chainedquiz_list' page in versions up… |
CVE-2022-4210 | Medium | 6.1 | 2022-12-02 | The Chained Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'dnf' parameter on the 'chainedquiz_list' page in versions up to… |
CVE-2022-4209 | Medium | 6.1 | 2022-12-02 | The Chained Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'pointsf' parameter on the 'chainedquiz_list' page in versions up… |
CVE-2022-4208 | Medium | 6.1 | 2022-12-02 | The Chained Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'datef' parameter on the 'chainedquiz_list' page in versions up t… |