Scriptonite

2 CVEs across 3 Scriptonite products. Browse Scriptonite vulnerabilities, severities, and proof-of-concept exploits.

Scriptonite products with known CVEs

ProductCVEs
Music Request Manager3
Simple User Profile1
User Files1
Scriptonite CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-25140High7.12025-02-07Cross-Site Request Forgery (CSRF) vulnerability in Scriptonite Simple User Profile simple-user-profile allows Stored XSS.This issue affects Simple User Profile…
CVE-2025-23953Critical10.02025-01-22Unrestricted Upload of File with Dangerous Type vulnerability in Scriptonite user files user-files allows Upload a Web Shell to a Web Server.This issue affects…
CVE-2024-6019Medium6.12024-09-12The Music Request Manager WordPress plugin through 1.3 does not sanitise and escape incoming music requests, which could allow unauthenticated users to perform…
CVE-2024-6018Medium6.12024-09-12The Music Request Manager WordPress plugin through 1.3 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which c…
CVE-2024-6017Medium6.12024-09-12The Music Request Manager WordPress plugin through 1.3 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could al…