JS
Vendor
Jeff Starr
19
CVEs
0
On KEV
0
New 30D
Products
SA7.5
Simple Ajax Chat (WordPress plugin)
Jeff Starr
3 CVEs0 on KEV0 new
US6.5
User Submitted Posts
Jeff Starr
3 CVEs0 on KEV0 new
DW4.8
Dashboard Widgets Suite
Jeff Starr
2 CVEs0 on KEV0 new
PR6.1
Prismatic
Jeff Starr
2 CVEs0 on KEV0 new
BP7.1
BBQ Pro
Jeff Starr
1 CVEs0 on KEV0 new
CF6.1
Contact Form X (WordPress plugin)
Jeff Starr
1 CVEs0 on KEV0 new
HM5.9
Head Meta Data
Jeff Starr
1 CVEs0 on KEV0 new
SA5.3
Simple Ajax Chat
Jeff Starr
1 CVEs0 on KEV0 new
SB6.5
Simple Blog Stats
Jeff Starr
1 CVEs0 on KEV0 new
SD5.4
Simple Download Counter
Jeff Starr
1 CVEs0 on KEV0 new
SS4.3
Simple Statistics for Feeds
Jeff Starr
1 CVEs0 on KEV0 new
TS5.4
Theme Switcha
Jeff Starr
1 CVEs0 on KEV0 new
US9.8
User Submitted Posts – Enable Users to Submit Posts from the Front End
Jeff Starr
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-62084 | US User Submitted Posts Jeff Starr | 6.5 | Sep 30 | WordPress User Submitted Posts plugin <= 20260810 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-73182 | BP BBQ Pro Jeff Starr | 7.1 | Aug 19 | WordPress BBQ Pro plugin <= 3.9 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-3075 | SA Simple Ajax Chat Jeff Starr | 5.3 | Feb 23 | WordPress Simple Ajax Chat plugin <= 20251121 - Sensitive Data Exposure vulnerability |
| CVE-2025-68509 | US User Submitted Posts Jeff Starr | 4.7 | Dec 24 | WordPress User Submitted Posts plugin <= 20251121 - Open Redirection vulnerability |
| CVE-2025-66081 | HM Head Meta Data Jeff Starr | 5.9 | Nov 21 | WordPress Head Meta Data plugin <= 20250327 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-57892 | SS Simple Statistics for Feeds Jeff Starr | 4.3 | Aug 22 | WordPress Simple Statistics for Feeds Plugin <= 20250322 - Cross Site Request Forgery (CSRF) Vulnerability |
| CVE-2025-47499 | SB Simple Blog Stats Jeff Starr | 6.5 | May 7 | WordPress Simple Blog Stats plugin <= 20250416 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-46240 | SD Simple Download Counter Jeff Starr | 5.4 | Apr 22 | WordPress Simple Download Counter plugin <= 2.2 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-46239 | TS Theme Switcha Jeff Starr | 5.4 | Apr 22 | WordPress Theme Switcha plugin <= 3.4 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2023-7251 | US User Submitted Posts Jeff Starr | 6.5 | Mar 26 | WordPress User Submitted Posts plugin <= 20230901 - Cross Site Scripting (XSS) vulnerability |
| CVE-2023-45603 | US User Submitted Posts – Enable Users to Submit Posts from the Front End Jeff Starr | 9.8 | Dec 20 | WordPress User Submitted Posts Plugin <= 20230902 is vulnerable to Arbitrary File Upload |
| CVE-2023-49743 | DW Dashboard Widgets Suite Jeff Starr | 4.8 | Dec 14 | WordPress Dashboard Widgets Suite Plugin <= 3.4.1 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2023-26517 | DW Dashboard Widgets Suite Jeff Starr | 4.8 | May 6 | WordPress Dashboard Widgets Suite Plugin <= 3.2.1 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2022-27850 | SA Simple Ajax Chat (WordPress plugin) Jeff Starr | 4.3 | Apr 15 | WordPress Simple Ajax Chat plugin <= 20220115 - Multiple Cross-Site Request Forgery (CSRF) vulnerability |
| CVE-2022-27849 | SA Simple Ajax Chat (WordPress plugin) Jeff Starr | 7.5 | Apr 15 | WordPress Simple Ajax Chat plugin <= 20220115 - Sensitive Information Disclosure vulnerability |
| CVE-2022-25610 | SA Simple Ajax Chat (WordPress plugin) Jeff Starr | 6.1 | Mar 25 | WordPress Simple Ajax Chat plugin <= 20220115 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability |
| CVE-2022-25601 | CF Contact Form X (WordPress plugin) Jeff Starr | 6.1 | Mar 11 | WordPress Contact Form X plugin <= 2.4 - Reflected Cross-Site Scripting (XSS) vulnerability |
| CVE-2021-24409 | PR Prismatic Jeff Starr | 6.1 | Jul 12 | Prismatic < 2.8 - Reflected Cross-Site Scripting (XSS) |
| CVE-2021-24408 | PR Prismatic Jeff Starr | 5.4 | Jul 12 | Prismatic < 2.8 - Contributor+ Stored XSS |