Known Vulnerabilities for Prismatic by Plugin-planet
Listed below are 2 of the newest known vulnerabilities associated with "Prismatic" by "Plugin-planet".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-3876 json | The Prismatic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'prismatic_encoded' pseudo-shortcode ... | Not Provided | 2026-04-16 | 2026-04-16 |
| CVE-2021-24409 json | The Prismatic WordPress plugin before 2.8 does not escape the 'tab' GET parameter before outputting it back in an attribute, ... | 6.1 - MEDIUM | 2021-07-12 | 2021-07-15 |
| CVE-2021-24408 json | The Prismatic WordPress plugin before 2.8 does not sanitise or validate some of its shortcode parameters, allowing users with... | 5.4 - MEDIUM | 2021-07-12 | 2021-07-15 |