Vulnerabilities in AddonsPress

2 results

CVE-2025-26950MEDIUMWordPress Nepali Date Converter plugin <= 2.0.8 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-4328MEDIUMAdvanced Import: One-Click Demo Import for WordPress <= 1.4.6 - Authenticated (Author+) Server-Side Request Forgery via 'demo_file' ParameterEPSS 0.2%