Specialk vulnerabilities
We track 5 vulnerabilities in Specialk products across 4 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on October 31, 2026.
Latest Specialk vulnerabilities
- 7.2 High severity
User Submitted Posts – Enable Users to Submit…: Improper Neutralization of Input During Web Page Generation
The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'user-submitted-content' parameter in all versions up to, and including, 20260916 due to insufficient
- 7.2 High severity
Simple Ajax Chat – Add a Fast, Secure Chat Box: Improper Neutralization of Input During Web Page Generation
The Simple Ajax Chat – Add a Fast, Secure Chat Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Chat Message in all versions up to, and including, <= 20260811 due to insufficient input sanitization and output escaping. This makes it po
- 7.2 High severity
Prismatic: Improper Neutralization of Input During Web Page Generation
The Prismatic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'prismatic_encoded' pseudo-shortcode in all versions up to, and including, 3.7.3. This is due to insufficient input sanitization and output escaping on user-supplied attrib
- 7.2 High severity
Blackhole for Bad Bots: Improper Neutralization of Input During Web Page Generation
The Blackhole for Bad Bots plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the User-Agent HTTP header in all versions up to and including 3.8. This is due to insufficient input sanitization and output escaping. The plugin uses sanitize_te
- 7.2 High severity
User Submitted Posts – Enable Users to Submit…: Improper Neutralization of Input During Web Page Generation
The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom fields in all versions up to, and including, 20251210 due to insufficient input sanitization and output