Skip to content

Vendor

roytanck vulnerabilities

3 published CVES affecting roytanck, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
0
Medium
3
Low
0
Unscored
0
CISA KEV
0
Atom feed of roytanck alerts

Products

Latest roytanck CVEs

Newest publication first

  1. CVE-2009-4169 WP Cumulus < 1.22 - Cross-Site Scripting

    Published
    MediumCVSS 4.3 EPSS 1.8%

    Cross-site scripting (XSS) vulnerability in wp-cumulus.php in the WP-Cumulus Plug-in before 1.22 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  2. CVE-2009-4168 WP-Cumulus <= 1.22 - Cross-Site Scripting via tagcloud

    Published
    MediumCVSS 4.3 EPSS 5.5% Public exploit

    Cross-site scripting (XSS) vulnerability in Roy Tanck tagcloud.swf, as used in the WP-Cumulus plugin before 1.23 for WordPress and the Joomulus module 2.0 and earlier for Joomla!, allows remote attackers to inject arbitrary web script or HTML via the tagcloud parameter in a tags...

  3. CVE-2009-4170 WP-Cumulus <= 1.20 - Sensitive Information Exposure

    Published
    MediumCVSS 5.0 EPSS 6.2% Public exploit

    WP-Cumulus Plug-in 1.20 for WordPress, and possibly other versions, allows remote attackers to obtain sensitive information via a crafted request to wp-cumulus.php, probably without parameters, which reveals the installation path in an error message.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.