36255 matches found
CVE-2015-9374
The CVE-2015-9374 entry concerns the Stripe Add-on for iThemes Exchange (WordPress) with an XSS vulnerability reported as occurring before version 1.2.0. The underlying issue is an XSS via add_query_arg() and remove_query_arg(), indicating input handling flaws in the plugin’s URL parameter proces...
CVE-2015-9373
CVE-2015-9373 affects the PayPal Pro Add-on for iThemes Exchange on WordPress before version 1.1.0. The vulnerability is a reflected XSS via add_query_arg() and remove_query_arg(), as described in the NVD entry. The document does not provide exploitable details beyond this XSS disclosure, nor exp...
CVE-2015-9372
CVE-2015-9372 describes a Cross-Site Scripting vulnerability in the WordPress plugin Membership Add-on for iThemes Exchange, affecting versions before 1.3.0. The root cause is improper handling of query arguments via add_query_arg() and remove_query_arg(), enabling an attacker to inject client-si...
CVE-2015-9371
CVE-2015-9371 concerns the WordPress ecosystem: the Manual Purchases Add-on for iThemes Exchange (before version 1.1.0) is vulnerable to XSS via add_query_arg() and remove_query_arg(). The connected records confirm the affected product and method but do not provide explicit exploitation details, ...
CVE-2015-9370
CVE-2015-9370 affects WordPress Invoices Add-on for iThemes Exchange (pre-1.4.0). A cross-site scripting (XSS) vulnerability is reported via add_query_arg() and remove_query_arg(), enabling client-side script execution. Multiple sources (NVD, RH) corroborate the XSS issue; exploitation status is ...
CVE-2015-9369
CVE-2015-9369 affects the WordPress plugin Easy US Sales Taxes Add-on for iThemes Exchange (before 1.1.0). The vulnerability is an XSS flaw triggered via the functions add_query_arg() and remove_query_arg(), enabling attacker-controlled client-side code execution in affected contexts. The root ca...
CVE-2015-9368
CVE-2015-9368 affects the Easy EU Value Added (VAT) Taxes Add-on for iThemes Exchange on WordPress, prior to version 1.2.0. The vulnerability is an XSS due to improper handling of add_query_arg() and remove_query_arg(), allowing injected scripts via URL parameters. Impact is XSS; exploitation det...
CVE-2015-9367
The CVE-2015-9367 entry concerns the WordPress ecosystem: the Easy Canadian Sales Taxes Add-on for iThemes Exchange is vulnerable to cross‑site scripting (XSS) through add_query_arg()/remove_query_arg() in versions before 1.1.0. The underlying issue is improper handling of query parameters that c...
CVE-2015-9366
CVE-2015-9366 affects the Custom URL Tracking Add-on for iThemes Exchange (WordPress) prior to version 1.1.0. The vulnerability is an XSS via add_query_arg() and remove_query_arg(). The NVD data lists CVSSv2 base score 4.3 (MEDIUM) with I:P and A:N, and CVSSv3 base score 6.1 (MEDIUM) with I:L, C:...
CVE-2015-9365
The CVE-2015-9365 entry concerns the WordPress plugin component: Authorize.net Add-on for iThemes Exchange, affected on versions before 1.1.0. The vulnerability is a cross-site scripting (XSS) issue exploitable via add_query_arg() and remove_query_arg(), as described in multiple sources (NVD entr...
CVE-2015-9364
CVE-2015-9364 affects the WordPress plugin component “2Checkout Add-on for iThemes Exchange.” It describes a Cross-Site Scripting (XSS) vulnerability via add_query_arg() and remove_query_arg() in versions before 1.1.0. The underlying issue is unsafe handling of query arguments in the plugin, enab...
CVE-2015-9363
CVE-2015-9363 : A cross-site scripting vulnerability affects WordPress via the iThemes Exchange plugin, reported to be present before version 1.12.0. The flaw is caused by improper handling of query arguments with add_query_arg() and remove_query_arg(), enabling injection of malicious scripts int...
CVE-2015-9362
CVE-2015-9362 concerns the WordPress Post Connector plugin prior to 1.0.4, where an XSS flaw exists through the use of add_query_arg() and remove_query_arg(). The vulnerability is in the Post Connector plugin for WordPress, which is affected by untrusted input that can be reflected in the page ou...
CVE-2015-9361
The CVE-2015-9361 entry concerns the WordPress Related Posts plugin (before 1.8.2). The vulnerability is a cross-site scripting (XSS) flaw triggered via add_query_arg() and remove_query_arg(), allowing injected client-side scripts. Affected component: Related Posts plugin for WordPress; root caus...
CVE-2015-9360
The CVE covers the UpdraftPlus WordPress backup plugin. Affected: UpdraftPlus plugin before version 1.9.64. Vulnerability: XSS via add_query_arg() and remove_query_arg(). Root cause: improper handling of query arguments enabling client-side script injection. Impact: cross-site scripting accessibl...
CVE-2015-9358
The feedwordpress WordPress plugin prior to 2015.0514 is affected by CVE-2015-9358: an XSS flaw exploitable via manipulated query arguments using add_query_arg() and remove_query_arg(). The vulnerability is described as a cross-site scripting issue impacting the plugin before the stated release, ...
CVE-2015-9357
The akismet plugin before 3.1.5 for WordPress has XSS...
CVE-2015-9356
CVE-2015-9356 concerns the WP-ViperGB WordPress plugin prior to version 1.3.16, where an XSS vulnerability exists via add_query_arg() and remove_query_arg(). The issue is distinct from CVE-2014-9460 and is documented across multiple sources in the connected set, including Red Hat and CVE records....
CVE-2015-9354
CVE-2015-9354 concerns the WordPress plugin GigPress. The vulnerability is a cross-site scripting (XSS) flaw in GigPress up to version 2.3.11 (i.e., affected when using versions before 2.3.11). The underlying issue is a client-side script injection vulnerability within the plugin, enabling likely...