Vladimir Statsenko vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Vladimir Statsenko products: 2 record(s), with severity, exploitation and fixes.

Terms descriptions 2

Exploited only (KEV) →

CVE-2026-24621 Medium · 5.9 CWE-79 Jan 23, 2026

WordPress Terms descriptions plugin <= 3.4.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vladimir Statsenko Terms descriptions terms-descriptions allows DOM-Based XSS.This issue affects Terms descriptions: from n/a through <= 3.4.9.

CVE-2025-62139 Medium · 5.3 CWE-201 Dec 31, 2025

WordPress Terms descriptions plugin <= 3.4.10 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Vladimir Statsenko Terms descriptions terms-descriptions allows Retrieve Embedded Sensitive Data.This issue affects Terms descriptions: from n/a through <= 3.4.10.