Lucene search

WordPress Villar Theme <= 1.0.10 is vulnerable to Cross Site Scripting (XSS)

🗓️ 18 Jul 2023 00:00:00Reported by Rafie Muhammad (Patchstack)Type

WordPress Villar Theme <= 1.0.10 is vulnerable to XSS, requiring immediate mitigation.

Reporter	Title	Published	Views	Family All 200
Patchstack	WordPress Ant Admin Notices for Team Plugin <= 1.0.4 is vulnerable to Cross Site Scripting (XSS)	18 Jul 202300:00	–	patchstack
Patchstack	WordPress WP Relevant Ads Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)	18 Jul 202300:00	–	patchstack
Patchstack	WordPress Modern Addons for Elementor Page Builder Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)	18 Jul 202300:00	–	patchstack
Patchstack	WordPress WP Store Locator – Extenders Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)	18 Jul 202300:00	–	patchstack
Patchstack	WordPress Product Author for WooCommerce Plugin < 1.0.4 is vulnerable to Cross Site Scripting (XSS)	18 Jul 202300:00	–	patchstack
Patchstack	WordPress Livemesh Addons for WPBakery Page Builder Plugin < 3.3 is vulnerable to Cross Site Scripting (XSS)	18 Jul 202300:00	–	patchstack
Patchstack	WordPress Caxton – Create Pro page layouts in Gutenberg Plugin <= 1.30.0 is vulnerable to Cross Site Scripting (XSS)	18 Jul 202300:00	–	patchstack
Patchstack	WordPress Affiliate Link Builder Plugin for Amazon Associates – Review Engine Plugin <= 1.0.41 is vulnerable to Cross Site Scripting (XSS)	18 Jul 202300:00	–	patchstack
Patchstack	WordPress WoowGallery – image gallery / content gallery / ecommerce gallery / social gallery / video gallery / album photo gallery Plugin < 1.2.0 is vulnerable to Cross Site Scripting (XSS)	18 Jul 202300:00	–	patchstack
Patchstack	WordPress Shipping for Nova Poshta Plugin <= 1.7.47 is vulnerable to Cross Site Scripting (XSS)	19 Jul 202300:00	–	patchstack

Vulners

Node

-villarRange≤1.0.10

Source	Link
wordpress	www.wordpress.org/themes/villar/
cve	www.cve.org/CVERecord
patchstack	www.patchstack.com/site-wide-reflected-xss-in-freemius-wordpress-sdk-affecting-millions-of-sites/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

18 Jul 2023 00:00Current

6.2Medium risk

Vulners AI Score6.2

wordpress theme vulnerability cross site scripting cve-2023-33999 medium severity unauthenticated