Lucene search

WordPress Featured Products First for WooCommerce – A Extension of WooCommerce (WooCommerce Addon Plugin) Plugin <= 1.9.5 is vulnerable to Cross Site Scripting (XSS)

🗓️ 18 Jul 2023 00:00:00Reported by Rafie Muhammad (Patchstack)Type

WordPress Featured Products First for WooCommerce – A Extension of WooCommerce (WooCommerce Addon Plugin) Plugin <= 1.9.5 vulnerable to Cross Site Scripting (XSS

Reporter	Title	Published	Views	Family All 199
Patchstack	WordPress Food Store – Online Food Delivery & Pickup Plugin <= 1.4.7.4 is vulnerable to Cross Site Scripting (XSS)	18 Jul 202300:00	–	patchstack
Patchstack	WordPress Post Grid, Image Gallery & Portfolio for Elementor \| PowerFolio Plugin < 3.0.3 is vulnerable to Cross Site Scripting (XSS)	18 Jul 202300:00	–	patchstack
Patchstack	WordPress Shortcodes Ultimate Plugin <= 5.13.0 is vulnerable to Cross Site Scripting (XSS)	18 Jul 202300:00	–	patchstack
Patchstack	WordPress Pods Plugin <= 2.7.31 is vulnerable to Cross Site Scripting (XSS)	19 Jul 202300:00	–	patchstack
Patchstack	WordPress Custom Login Page Customizer Plugin <= 2.2.2 is vulnerable to Cross Site Scripting (XSS)	18 Jul 202300:00	–	patchstack
Patchstack	WordPress ActiveCampaign Email Preference Center Plugin < 2.0.12 is vulnerable to Cross Site Scripting (XSS)	18 Jul 202300:00	–	patchstack
Patchstack	WordPress ï»¿ WP Nice Accordion - Best FAQ Accordion Plugin for WordPress Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)	18 Jul 202300:00	–	patchstack
Patchstack	WordPress SKT Templates – Elementor & Gutenberg templates Plugin < 5.0.2 is vulnerable to Cross Site Scripting (XSS)	18 Jul 202300:00	–	patchstack
Patchstack	WordPress Client Invoicing by Sprout Invoices Plugin <= 19.0 is vulnerable to Cross Site Scripting (XSS)	19 Jul 202300:00	–	patchstack
Patchstack	WordPress Display Data on your site! Create Dynamic Content Templates from any form of data. Works with ACF, Pods, BuddyPress/ BuddyBoss Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)	19 Jul 202300:00	–	patchstack

Vulners

Node

woocommerce_expert_–_woocommerce_developer_–_featured_product_first_for_woocommerce_plugin_developer featured_products_first_for_woocommerce_–_a_extension_of_woocommerce_\(woocommerce_addon_plugin\)Range≤1.9.5

Source	Link
wordpress	www.wordpress.org/plugins/featured-products-first-for-woocommerce/
cve	www.cve.org/CVERecord
patchstack	www.patchstack.com/site-wide-reflected-xss-in-freemius-wordpress-sdk-affecting-millions-of-sites/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

18 Jul 2023 00:00Current

6.9Medium risk

Vulners AI Score6.9