682 matches found
WordPress WP Map Block by aBlocks plugin < 2.0.3 - Contributor+ Stored XSS via Marker vulnerability
Contributor+ Stored XSS via Marker vulnerability discovered by Krugov Artyom in WordPress Plugin WP Map Block versions 2.0.3...
CVE-2025-5194
CVE-2025-5194 affects the WordPress plugin “WP Map Block – Gutenberg Map Block for Google Map and OpenStreet Map by aBlocks.” The vulnerability arises because the plugin, in versions prior to 2.0.3, does not validate and escape some block options before outputting them on a post/page where the bl...
WordPress plugin Slickstream 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
WordPress Euro FxRef Currency Converter plugin <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via currency Shortcode vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via currency Shortcode vulnerability discovered by Gilang in WordPress Plugin Euro FxRef Currency Converter versions = 2.0.2...
CVE-2025-49859
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in etruel WP Views Counter wpecounter allows Stored XSS.This issue affects WP Views Counter: from n/a through = 2.0.3...
CVE-2025-49859
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in etruel WP Views Counter wpecounter allows Stored XSS.This issue affects WP Views Counter: from n/a through = 2.0.3...
CVE-2025-49859 WordPress WP Views Counter plugin <= 2.0.3 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in etruel WP Views Counter wpecounter allows Stored XSS.This issue affects WP Views Counter: from n/a through = 2.0.3...
WordPress plugin WP Views Counter 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...
CVE-2025-48141
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Alex Zaytseff Multi CryptoCurrency Payments multi-crypto-currency-payment allows SQL Injection.This issue affects Multi CryptoCurrency Payments: from n/a through = 2.0.7...
CVE-2025-48141
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Alex Zaytseff Multi CryptoCurrency Payments multi-crypto-currency-payment allows SQL Injection.This issue affects Multi CryptoCurrency Payments: from n/a through = 2.0.7...
CVE-2025-48141
CVE-2025-48141 concerns a SQL Injection in the WordPress plugin Multi CryptoCurrency Payments (vulnerable from unknown n/a up to 2.0.3). The issue is described as an improper neutralization of special elements used in an SQL command, enabling unauthenticated network-based access with potential im...
WordPress plugin Multi CryptoCurrency Payments SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in...
CVE-2025-28989
CVE-2025-28989 — Affects the WordPress plugin Read More Login. The vulnerability is an Stored XSS caused by improper input neutralization during web page generation, with impact described as cross-site scripting through stored payloads. Affected versions are Reads More Login: from n/a through 2.0...
CVE-2025-28989 WordPress Read More Login plugin <= 2.0.3 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in arildur Read More Login read-more-login allows Stored XSS.This issue affects Read More Login: from n/a through = 2.0.3...
CVE-2024-32560
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sharabindu QR Code Composer allows Stored XSS.This issue affects QR Code Composer: from n/a through 2.0.3...
CVE-2024-37542
Missing Authorization vulnerability in WpDevArt Responsive Image Gallery, Gallery Album.This issue affects Responsive Image Gallery, Gallery Album: from n/a through 2.0.3...
CVE-2024-6639
The MDx theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mdxlistitem' shortcode in all versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers,...
CVE-2023-34387
Missing Authorization vulnerability in Constant Contact Constant Contact Forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Constant Contact Forms: from n/a through 2.0.3...
CVE-2023-48767
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Raghu Goriya MyTube PlayList allows Reflected XSS.This issue affects MyTube PlayList: from n/a through 2.0.3...