CyberSecBulletin

Franciscopalacios vulnerabilities

We track 2 vulnerabilities in Franciscopalacios products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 13, 2025.

2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score

Latest Franciscopalacios vulnerabilities

  • 8.8 High severity

    Postem Ipsum: Missing Authorization

    CVE-2025-14397Franciscopalacios

    The Postem Ipsum plugin for WordPress is vulnerable to unauthorized modification of data to Privilege Escalation due to a missing capability check on the postem_ipsum_generate_users() function in all versions up to, and including, 3.0.1. This makes it possible

  • 7.1 High severity

    Easy Filtering: Improper Neutralization of Input During Web Page Generation

    CVE-2025-23732Franciscopalacios

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in franciscopalacios Easy Filtering easy-filtering allows Reflected XSS.This issue affects Easy Filtering: from n/a through <= 2.5.0.