Lucene search
Rafie Muhammad (Patchstack)PATCHSTACK:0553AC0CF97F0949C26B960358FCBF23HistoryJul 18, 2023 - 12:00 a.m.
WordPress Custom Registration and Custom Login Forms with New Recaptcha Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)
2023-07-1800:00:00
Rafie Muhammad (Patchstack)
patchstack.com
1
wordpress
custom registration
custom login forms
new recaptcha
plugin
injection
cross site scripting
cve-2023-33999
patchstack
unauthenticated
AI Score
6.8
Confidence
High
Software
Custom Registration and Custom Login Forms with New Recaptcha
Type
Plugin
Vulnerable versions
<= 1.0.0
Fixed in
N/A
OWASP Top 10
A3: Injection
Classification
Cross Site Scripting (XSS)
CVE
CVE-2023-33999
Patch priority
Medium
CVSS severity
Medium (7.1)
Developer
Claim ownership
PSID
ccd294a17f54
Credits
Rafie Muhammad (Patchstack)
Required privilege
Unauthenticated
Published
18 July, 2023
Expand full details Have additional information or questions about this entry? Let us know.
Solution
We advise to mitigate or resolve the vulnerability immediately.
Affected configurations
Node
addifycustom_registration_forms_builderRange≤1.0.0wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| addify | custom_registration_forms_builder | * | cpe:2.3:a:addify:custom_registration_forms_builder:*:*:*:*:*:wordpress:*:* |
Related
wpvulndb
wpvulndb
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
2023-07-25 00:00:00
patchstack
patchstack