What’s Vulnerable › Products

era404 StaffList vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your era404 StaffList version is affected

Latest era404 StaffList vulnerabilities

• CVE-2025-12185 — StaffList <= 3.2.6 - Authenticated (Admin+) Stored Cross-Site Scripting (CVSS 4.4)
• CVE-2025-32255 — WordPress StaffList plugin <= 3.2.7 - Sensitive Data Exposure vulnerability (CVSS 5.3)
• CVE-2025-32232 — WordPress StaffList plugin <= 3.2.7 - Broken Access Control vulnerability (CVSS 4.3)
• CVE-2024-13749 — StaffList <= 3.2.3 - Cross-Site Request Forgery to Reflected Cross-Site Scripting (CVSS 6.1)
• CVE-2022-1556 — StaffList < 3.1.5 - Admin+ SQLi (CVSS 9.8)