Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

Jeff Starr — Vulnerabilities & Security Advisories 17

Browse all 17 CVE security advisories affecting Jeff Starr. AI-powered Chinese analysis, POCs, and references for each vulnerability.

CVE IDTitleCVSSSeverityPublished
CVE-2026-3075 WordPress Simple Ajax Chat plugin <= 20251121 - Sensitive Data Exposure vulnerability — Simple Ajax ChatCWE-497 7.5AIHighAI2026-02-23
CVE-2025-68509 WordPress User Submitted Posts plugin <= 20251121 - Open Redirection vulnerability — User Submitted PostsCWE-601 4.7 Medium2025-12-24
CVE-2025-66081 WordPress Head Meta Data plugin <= 20250327 - Cross Site Scripting (XSS) vulnerability — Head Meta DataCWE-79 5.9 Medium2025-11-21
CVE-2025-57892 WordPress Simple Statistics for Feeds Plugin <= 20250322 - Cross Site Request Forgery (CSRF) Vulnerability — Simple Statistics for FeedsCWE-352 4.3 Medium2025-08-22
CVE-2025-47499 WordPress Simple Blog Stats plugin <= 20250416 - Cross Site Scripting (XSS) Vulnerability — Simple Blog StatsCWE-79 6.5 Medium2025-05-07
CVE-2025-46240 WordPress Simple Download Counter plugin <= 2.2 - Cross Site Scripting (XSS) Vulnerability — Simple Download CounterCWE-79 6.5 Medium2025-04-22
CVE-2025-46239 WordPress Theme Switcha plugin <= 3.4 - Cross Site Scripting (XSS) Vulnerability — Theme SwitchaCWE-79 6.5 Medium2025-04-22
CVE-2023-7251 WordPress User Submitted Posts plugin <= 20230901 - Cross Site Scripting (XSS) vulnerability — User Submitted PostsCWE-79 6.5 Medium2024-03-26
CVE-2023-45603 WordPress User Submitted Posts Plugin <= 20230902 is vulnerable to Arbitrary File Upload — User Submitted Posts – Enable Users to Submit Posts from the Front EndCWE-434 9.0 Critical2023-12-20
CVE-2023-49743 WordPress Dashboard Widgets Suite Plugin <= 3.4.1 is vulnerable to Cross Site Scripting (XSS) — Dashboard Widgets SuiteCWE-79 5.9 Medium2023-12-14
CVE-2023-26517 WordPress Dashboard Widgets Suite Plugin <= 3.2.1 is vulnerable to Cross Site Scripting (XSS) — Dashboard Widgets SuiteCWE-79 5.9 Medium2023-05-06
CVE-2022-27850 WordPress Simple Ajax Chat plugin <= 20220115 - Multiple Cross-Site Request Forgery (CSRF) vulnerability — Simple Ajax Chat (WordPress plugin)CWE-352 5.4 Medium2022-04-15
CVE-2022-27849 WordPress Simple Ajax Chat plugin <= 20220115 - Sensitive Information Disclosure vulnerability — Simple Ajax Chat (WordPress plugin)CWE-200 5.3 Medium2022-04-15
CVE-2022-25610 WordPress Simple Ajax Chat plugin <= 20220115 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability — Simple Ajax Chat (WordPress plugin)CWE-79 3.4 Low2022-03-25
CVE-2022-25601 WordPress Contact Form X plugin <= 2.4 - Reflected Cross-Site Scripting (XSS) vulnerability — Contact Form X (WordPress plugin)CWE-79 4.7 Medium2022-03-11
CVE-2021-24409 Prismatic < 2.8 - Reflected Cross-Site Scripting (XSS) — PrismaticCWE-79 6.1 -2021-07-12
CVE-2021-24408 Prismatic < 2.8 - Contributor+ Stored XSS — PrismaticCWE-79 5.4 -2021-07-12

This page lists every published CVE security advisory associated with Jeff Starr. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.