Security
فارسی
All products

visualizer

WordPress · Plugin
24 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Visualizer <= 4.0.7 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2026-86784 visualizer WordPress Medium Fix reported
Visualizer – Tables & Charts Manager with Built-in AI Generator < 4.0.6 - Authenticated (Contributor+) Arbitrary File DeletionCVE-2026-86779 visualizer WordPress High Fix reported
Visualizer – Tables & Charts Manager with Built-in AI Generator 4.0.0 - 4.0.5 - Authenticated (Contributor+) Insecure Direct Object ReferenceCVE-2026-86782 visualizer WordPress Medium Fix reported
Visualizer – Tables & Charts Manager with Built-in AI Generator < 4.0.7 - Missing AuthorizationCVE-2026-19726 visualizer WordPress Medium Fix reported
Visualizer: Tables and Charts Manager <= 4.0.5 - Authenticated (Contributor+) Server-Side Request ForgeryCVE-2026-14939 visualizer WordPress Medium Fix reported
Visualizer – Tables & Charts Manager with Built-in AI Generator <= 4.0.1 - Authenticated (Contributor+) SQL InjectionCVE-2026-65526 visualizer WordPress Medium Fix reported
Visualizer <= 4.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'backend-title' ParameterCVE-2026-15653 visualizer WordPress Medium Fix reported
Visualizer <= 4.0.3 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via /visualizer/v1/action/{chart}/{type}/ REST EndpointCVE-2026-13468 visualizer WordPress High Fix reported
Visualizer: Tables and Charts Manager for WordPress <= 3.11.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Chart Creation and Modification via renderChartPages() and uploadData() FunctionsCVE-2026-8689 visualizer WordPress Medium Fix reported
Visualizer: Tables and Charts Manager for WordPress < 4.0.0 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2026-24573 visualizer WordPress Medium Fix reported
Keycloak vulnerable to Stored Cross site Scripting (XSS) when loading default rolesCVE-2022-2256 · GHSA-W9MF-83W3-FV49 org.keycloak:keycloak-parentvisualizer MavenWordPress Medium Fix reported
Visualizer: Tables and Charts Manager for WordPress <= 3.11.12 - Authenticated (Contributor+) SQL InjectionCVE-2025-12483 visualizer WordPress Medium Fix reported
XXE in PHPSpreadsheet's XLSX readerCVE-2024-45293 · GHSA-6HWR-6V2F-3M88 phpoffice/phpexcelphpoffice/phpspreadsheet ComposerWordPress High Fix reported
Visualizer: Tables and Charts Manager for WordPress <= 3.11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Import Data From FileCVE-2025-1065 visualizer WordPress Medium Fix reported
Visualizer <= 3.11.1 - Authenticated (Subscriber+) SQL InjectionCVE-2024-35736 visualizer WordPress Critical Fix reported
Visualizer: Tables and Charts Manager for WordPress <= 3.10.15 - Missing Authorization to Arbitrary SQL ExecutionCVE-2024-3750 visualizer WordPress High Fix reported
Visualizer <= 3.10.5 - Reflected Cross-Site ScriptingCVE-2024-27958 visualizer WordPress Medium Fix reported
ThemeIsle SDK <= Various Versions - Missing AuthorizationCVE-2024-1047 feedzy-rss-feedsmenu-icons WordPress Medium Fix reported
Visualizer: Tables and Charts Manager for WordPress <= 3.3.0 - Stored Cross-Site ScriptingCVE-2019-16931 visualizer WordPress Medium Fix reported
Visualizer: Tables and Charts Manager for WordPress <= 3.7.9 - Authenticated (Contributor+) PHAR DeserializationCVE-2022-2444 visualizer WordPress High Fix reported