Wordpress Tooltips

Source repositories

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2024-30243	WordPress Wordpress Tooltips	Hig	0.55	8.5	0.01	Mar 28, 2024	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tomas WordPress Tooltips.This issue affects WordPress Tooltips: from n/a before 9.4.5.
CVE-2024-31285	WordPress Wordpress Tooltips	Hig	0.46	7.1	0.00	Apr 11, 2024	Cross-Site Request Forgery (CSRF) vulnerability in Tooltip WordPress Tooltips allows Stored XSS.This issue affects WordPress Tooltips: from n/a through 9.5.3.
CVE-2025-63005	WordPress Wordpress Tooltips	Med	0.42	6.5	0.00	Dec 31, 2025	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tomas WordPress Tooltips wordpress-tooltips allows Stored XSS.This issue affects WordPress Tooltips: from n/a through <= 10.9.3.
CVE-2023-25985	Tooltips Wordpress Tooltips	Med	0.28	4.3	0.00	Nov 18, 2023	Cross-Site Request Forgery (CSRF) vulnerability in Tomas \| Docs \| FAQ \| Premium Support WordPress Tooltips.This issue affects WordPress Tooltips: from n/a through 8.2.5.

CVE-2024-30243HigMar 28, 2024
WordPress
Wordpress Tooltips
risk 0.55cvss 8.5epss 0.01
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tomas WordPress Tooltips.This issue affects WordPress Tooltips: from n/a before 9.4.5.
CVE-2024-31285HigApr 11, 2024
WordPress
Wordpress Tooltips
risk 0.46cvss 7.1epss 0.00
Cross-Site Request Forgery (CSRF) vulnerability in Tooltip WordPress Tooltips allows Stored XSS.This issue affects WordPress Tooltips: from n/a through 9.5.3.
CVE-2025-63005MedDec 31, 2025
WordPress
Wordpress Tooltips
risk 0.42cvss 6.5epss 0.00
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tomas WordPress Tooltips wordpress-tooltips allows Stored XSS.This issue affects WordPress Tooltips: from n/a through <= 10.9.3.
CVE-2023-25985MedNov 18, 2023
Tooltips
Wordpress Tooltips
risk 0.28cvss 4.3epss 0.00
Cross-Site Request Forgery (CSRF) vulnerability in Tomas | Docs | FAQ | Premium Support WordPress Tooltips.This issue affects WordPress Tooltips: from n/a through 8.2.5.