ERA404 StaffList

• CVE-2025-12185 Medium 4.4 StaffList <= 3.2.6 - Authenticated (Admin+) Stored Cross-Site Scripting 0.2%
• CVE-2025-32255 Medium 5.3 WordPress StaffList plugin <= 3.2.7 - Sensitive Data Exposure vulnerability 0.6%
• CVE-2025-32232 Medium 4.3 WordPress StaffList plugin <= 3.2.7 - Broken Access Control vulnerability 0.4%
• CVE-2024-13749 Medium 6.1 StaffList <= 3.2.3 - Cross-Site Request Forgery to Reflected Cross-Site Scripting 0.3%