GCVE - cpe:2.3:a:simple_staff_list_project:simple_staff

Approved changes feed: RSS · Atom

cpe:2.3:a:simple_staff_list_project:simple_staff_list:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

Vendor	Simple Staff List Project (`e474e114-a290-5a15-b358-7fa14cb27624`)
Product	Simple Staff List (`f567a1b0-e0f5-556c-bb97-cdb0327ce730`)
Edition	*
Language	*
Software edition	*
Target software	wordpress
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:github/wp-plugins/simple-staff-list`	purl2cpe	2026-06-01 10:13:06.041534
`pkg:github/wpplugins/simple-staff-list`	purl2cpe	2026-06-01 10:13:06.041536

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-28790`	vulnerable	2026-06-08 06:02:35.749132	WordPress Simple Staff List Plugin <= 2.2.3 is vulnerable to Cross Site Scripting (XSS) MEDIUM (5.9) Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Brett Shumaker Simple Staff List plugin <= 2.2.3 versions. Published: 2023-09-27T05:14:37.752Z Updated: 2026-04-28T16:08:17.005Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/simple-staff-list/wordpress-simple-staff-list-plugin-2-2-3-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-23686`	vulnerable	2026-06-08 05:56:04.202045	WordPress Simple Staff List Plugin <= 2.2.2 is vulnerable to Cross Site Scripting (XSS) MEDIUM (6.5) Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Brett Shumaker Simple Staff List plugin <= 2.2.2 versions. Published: 2023-04-04T11:26:18.896Z Updated: 2026-04-28T16:08:00.668Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/simple-staff-list/wordpress-simple-staff-list-plugin-2-2-2-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.