Total-Soft
2 CVEs across 5 Total-Soft products. Browse Total-Soft vulnerabilities, severities, and proof-of-concept exploits.
Total-Soft products with known CVEs
Total-Soft CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2024-8700 | High | 7.5 | 2025-05-15 | The Event Calendar WordPress plugin through 1.0.4 does not check for authorization on delete actions, allowing unauthenticated users to delete arbitrary calend… |
CVE-2023-32585 | High | 7.5 | 2024-12-13 | Missing Authorization vulnerability in Total-Soft Portfolio Gallery – Responsive Image Gallery allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2024-9769 | Medium | 4.4 | 2024-12-06 | The Video Gallery – Best WordPress YouTube Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to… |
CVE-2024-10247 | High | 7.2 | 2024-12-06 | The Video Gallery – Best WordPress YouTube Gallery Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the orderby parameter in all versi… |
CVE-2024-8625 | High | 7.2 | 2024-10-21 | The TS Poll WordPress plugin before 2.4.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injectio… |
CVE-2024-9022 | High | 7.2 | 2024-10-10 | The TS Poll – Survey, Versus Poll, Image Poll, Video Poll plugin for WordPress is vulnerable to SQL Injection via the ‘orderby’ parameter in all versions up to… |
CVE-2023-45069 | High | 7.6 | 2023-11-06 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Video Gallery by Total-Soft Video Gallery – Best WordPres… |
CVE-2023-25979 | Medium | 5.9 | 2023-05-03 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Video Gallery by Total-Soft Video Gallery plugin <= 1.7.6 versions. |
CVE-2022-36390 | Medium | 4.1 | 2022-09-21 | Authenticated (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Totalsoft Event Calendar – Calendar plugin <= 1.4.6 at WordPress. |
CVE-2022-38067 | Medium | 6.5 | 2022-09-09 | Unauthenticated Event Deletion vulnerability in Totalsoft Event Calendar – Calendar plugin <= 1.4.6 at WordPress. |
CVE-2020-11673 | Critical | 9.8 | 2020-04-13 | An issue was discovered in the Responsive Poll through 1.3.4 for Wordpress. It allows an unauthenticated user to manipulate polls, e.g., delete, clone, or view… |