CVE-2014-4558

CVE-2014-4558 affects the WordPress plugin Swipe Checkout for WooCommerce (WooCommerce Swipe)

CVE-2014-4558

Cross-site scripting XSS vulnerability in test-plugin.php in the Swipe Checkout for WooCommerce plugin 2.7.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the apiurl parameter...

CVE-2014-4548

CVE-2014-4548 : The Ruven Toolkit WordPress plugin (

CVE-2014-4544

Cross-site scripting XSS vulnerability in the Podcast Channels plugin 0.20 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the Filename parameter to getid3/demos/demo.write.php...

CVE-2014-4544

Podcast Channels WordPress plugin ≤0.20 is affected by an unauthenticated reflected XSS via the Filename parameter to getid3/demos/demo.write.php. The vulnerability allows execution of arbitrary script in the victim’s browser, with potential session-related impacts. Affected versions are 0.20 and...

CVE-2014-4539

Cross-site scripting XSS vulnerability in the Movies plugin 0.6 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to getid3/demos/demo.mimeonly.php...

CVE-2014-4539

CVE-2014-4539 : A cross-site scripting (XSS) flaw in the WordPress Movies plugin (versions 0.6 and earlier) exists due to insufficient validation in the filename parameter of getid3/demos/demo.mimeonly.php. This allows remote attackers to inject arbitrary script/HTML, potentially executing code i...

CVE-2014-4567

Cross-site scripting XSS vulnerability in comments/videowhisper2/rlogout.php in the Video Comments Webcam Recorder plugin 1.55, as downloaded before 20140116 for WordPress allows remote attackers to inject arbitrary web script or HTML via the message parameter...

CVE-2014-4567

CVE-2014-4567 : XSS in the WordPress Video Comments Webcam Recorder plugin (version ~1.55, affected when downloaded before 20140116) located in comments/videowhisper2/r_logout.php . Root cause: insufficient validation of client-side data in the web app, allowing injection of arbitrary script/HTML...

CVE-2014-4592

Cross-site scripting XSS vulnerability in rss.class/scripts/magpiedebug.php in the WP-Planet plugin 0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the url parameter...

CVE-2014-4592

The CVE-2014-4592 entry refers to a cross-site scripting (XSS) vulnerability in the WP-Planet WordPress plugin (<= 0.1) specifically in rss.class/scripts/magpie_debug.php, exploitable via the url parameter. The Root Cause is improper input handling that allows attackers to inject and execute c...

CVE-2014-4523

creationtimestamp| type| source ---|---|--- 2019-12-27 16:40:13+00:00| seen| https://t.me/cibsecurity/8878 2024-03-17 14:51:45+00:00| seen| https://t.me/ctinow/209940...

CVE-2014-4525

creationtimestamp| type| source ---|---|--- 2019-12-27 16:40:13+00:00| seen| https://t.me/cibsecurity/8877...

CVE-2014-4559

creationtimestamp| type| source ---|---|--- 2019-12-27 16:40:12+00:00| seen| https://t.me/cibsecurity/8876 2024-03-17 14:51:46+00:00| seen| https://t.me/ctinow/209941...

CVE-2014-4519

Cross-site scripting XSS vulnerability in the Conversador plugin 2.61 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the 'page' parameter...

CVE-2014-4519

CVE-2014-4519 : A cross-site scripting (XSS) vulnerability affects the WordPress Conversador plugin ≤ 2.61. The issue arises from the page parameter, allowing remote attackers to inject arbitrary scripts/HTML. Connected sources confirm affected software and vulnerable parameter, but no explicit r...

CVE-2014-4523

Cross-site scripting XSS vulnerability in the Easy Career Openings plugin 0.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

CVE-2014-4559

CVE-2014-4559 is an XSS vulnerability in the Swipe Checkout for WP e-Commerce plugin (WordPress) affecting test-plugin.php, version 3.1.0 and earlier. The issue allows remote injection of arbitrary script/HTML via the parameters api_key, payment_page_url, merchant_id, api_url, or currency. Connec...

CVE-2014-4525

The CVE-2014-4525 entry describes a cross-site scripting (XSS) vulnerability in the magpie/scripts/magpie_slashbox.php file of the WP Ebay Feeds plugin for WordPress, affecting version 1.1 and earlier. The issue arises via the rss_url parameter, allowing remote attackers to inject arbitrary JavaS...

CVE-2014-4523

CVE-2014-4523 is a cross-site scripting (XSS) vulnerability in the WordPress plugin Easy Career Openings (versions ≤ 0.4). Multiple sources describe it as arising from insufficient validation of client-side data, allowing remote attackers to inject arbitrary scripts via unspecified parameters. Th...