GCVE - cpe:2.3:a:mynamedia:spiritual_gifts_survey_\(and_optional_s.h.a.p.e

Approved changes feed: RSS · Atom

cpe:2.3:a:mynamedia:spiritual_gifts_survey_\(and_optional_s.h.a.p.e_survey\):*:*:*:*:*:wordpress:*:*

part: a version: * update: *

Vendor	Mynamedia (`cb1ac86d-4b3c-5861-b16c-b10d8cd5c7fe`)
Product	Spiritual Gifts Survey (And Optional S.H.A.P.E Survey) (`602e4c8d-88c8-5302-a0a8-8445902b80bb`)
Edition	*
Language	*
Software edition	*
Target software	wordpress
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-0688`	vulnerable	2026-06-08 07:02:25.185207	Spiritual Gifts Survey <= 0.9.10 - Unauthenticated CSRF to XSS The Spiritual Gifts Survey (and optional S.H.A.P.E survey) WordPress plugin through 0.9.10 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against only unauthenticated users. Published: 2025-05-15T20:07:25.673Z Updated: 2025-05-20T19:12:08.593Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/1e2b77c3-ad45-4734-998a-c1722ebd1f4f/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-0687`	vulnerable	2026-06-08 07:02:25.184763	Spiritual Gifts Survey <= 0.9.10 - Unauthenticated CSRF to XSS The Spiritual Gifts Survey (and optional S.H.A.P.E survey) WordPress plugin through 0.9.10 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against only unauthenticated users. Published: 2025-05-15T20:07:25.468Z Updated: 2025-05-20T19:12:15.982Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/3c1e21e1-32f2-4a20-9262-80e1cdab534d/	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.