Lucene search

WordPress Free Shipping Label and Progress Bar for WooCommerce Plugin < 2.6.12 is vulnerable to Cross Site Scripting (XSS)

🗓️ 18 Jul 2023 00:00:00Reported by Rafie Muhammad (Patchstack)Type

WordPress Free Shipping Label and Progress Bar for WooCommerce Plugin < 2.6.12 XSS Vulnerability Patch Availabl

Reporter	Title	Published	Views	Family All 199
Patchstack	WordPress Food Store – Online Food Delivery & Pickup Plugin <= 1.4.7.4 is vulnerable to Cross Site Scripting (XSS)	18 Jul 202300:00	–	patchstack
Patchstack	WordPress Post Grid, Image Gallery & Portfolio for Elementor \| PowerFolio Plugin < 3.0.3 is vulnerable to Cross Site Scripting (XSS)	18 Jul 202300:00	–	patchstack
Patchstack	WordPress Shortcodes Ultimate Plugin <= 5.13.0 is vulnerable to Cross Site Scripting (XSS)	18 Jul 202300:00	–	patchstack
Patchstack	WordPress Pods Plugin <= 2.7.31 is vulnerable to Cross Site Scripting (XSS)	19 Jul 202300:00	–	patchstack
Patchstack	WordPress Custom Login Page Customizer Plugin <= 2.2.2 is vulnerable to Cross Site Scripting (XSS)	18 Jul 202300:00	–	patchstack
Patchstack	WordPress ActiveCampaign Email Preference Center Plugin < 2.0.12 is vulnerable to Cross Site Scripting (XSS)	18 Jul 202300:00	–	patchstack
Patchstack	WordPress ï»¿ WP Nice Accordion - Best FAQ Accordion Plugin for WordPress Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)	18 Jul 202300:00	–	patchstack
Patchstack	WordPress SKT Templates – Elementor & Gutenberg templates Plugin < 5.0.2 is vulnerable to Cross Site Scripting (XSS)	18 Jul 202300:00	–	patchstack
Patchstack	WordPress Client Invoicing by Sprout Invoices Plugin <= 19.0 is vulnerable to Cross Site Scripting (XSS)	19 Jul 202300:00	–	patchstack
Patchstack	WordPress Display Data on your site! Create Dynamic Content Templates from any form of data. Works with ACF, Pods, BuddyPress/ BuddyBoss Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)	19 Jul 202300:00	–	patchstack

Vulners

Node

devnet free_shipping_label_and_progress_bar_for_woocommerceRange<2.6.12

Source	Link
wordpress	www.wordpress.org/plugins/free-shipping-label/
cve	www.cve.org/CVERecord
patchstack	www.patchstack.com/site-wide-reflected-xss-in-freemius-wordpress-sdk-affecting-millions-of-sites/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

18 Jul 2023 00:00Current

6.3Medium risk

Vulners AI Score6.3