Rafasashi

6 CVEs across 6 Rafasashi products. Browse Rafasashi vulnerabilities, severities, and proof-of-concept exploits.

Rafasashi products with known CVEs

ProductCVEs
User Session Synchronizer2
Custom New User Notification1
Language Switcher1
Svg Captcha1
Todo Custom Field1
Todo Custom Field1
Rafasashi CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-15341Critical9.82026-08-15The User Session Synchronizer plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 1.4…
CVE-2026-3551Medium4.42026-04-16The Custom New User Notification plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's admin settings in all versions up to, and i…
CVE-2025-32612High7.12025-04-09Cross-Site Request Forgery (CSRF) vulnerability in rafasashi User Session Synchronizer user-session-synchronizer allows Stored XSS.This issue affects User Sess…
CVE-2024-49648High7.12024-10-29Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rafasashi SVG Captcha svg-captcha allows Reflected XSS.Th…
CVE-2024-49642High7.12024-10-29Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rafasashi Todo Custom Field todo-custom-field allows Refl…
CVE-2024-9610Medium6.12024-10-11The Language Switcher plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the…