PT-2019-7315

Name of the Vulnerable Software and Affected Versions wp-vipergb plugin versions prior to 1.3.16 Description The issue concerns a cross-site scripting XSS problem. It is related to the use of add query arg and remove query arg functions. Recommendations For versions prior to 1.3.16, update to...

PT-2019-7333

Name of the Vulnerable Software and Affected Versions iThemes Exchange Stripe Add-on for WordPress version 1.2.0 and earlier Description The issue concerns a problem with the add query arg and remove query arg functions, which can lead to XSS. Recommendations For versions prior to 1.2.0, update t...

PT-2019-7331

Name of the Vulnerable Software and Affected Versions Membership Add-on for iThemes Exchange versions prior to 1.3.0 Description The issue concerns a problem with the add query arg and remove query arg functions, which can lead to XSS. Recommendations For versions prior to 1.3.0, update to versio...

PT-2019-7323

Name of the Vulnerable Software and Affected Versions 2Checkout Add-on for iThemes Exchange version 1.1.0 and earlier Description The issue concerns a problem with the add query arg and remove query arg functions, which can lead to XSS. Recommendations For versions prior to 1.1.0, update to versi...

PT-2019-7337

Name of the Vulnerable Software and Affected Versions iThemes Builder Theme Market versions prior to 5.1.27 Description The issue concerns a problem with the add query arg and remove query arg functions, which can lead to XSS. Recommendations For versions prior to 5.1.27, update to version 5.1.27...

PT-2019-7335

Name of the Vulnerable Software and Affected Versions iThemes Mobile version 1.2.7 and earlier Description The issue is related to cross-site scripting XSS and involves the functions add query arg and remove query arg. Recommendations For iThemes Mobile version 1.2.7 and earlier, update to versio...

PT-2019-7326

Name of the Vulnerable Software and Affected Versions Easy Canadian Sales Taxes Add-on for iThemes Exchange versions prior to 1.1.0 Description The issue concerns a problem with the Easy Canadian Sales Taxes Add-on for iThemes Exchange, where there is a potential for XSS Cross-Site Scripting...

PT-2019-7317

Name of the Vulnerable Software and Affected Versions feedwordpress plugin versions prior to 2015.0514 Description The issue concerns a cross-site scripting XSS problem. It is related to the use of add query arg and remove query arg functions. Recommendations For versions prior to 2015.0514, upda...

PT-2019-8511

Name of the Vulnerable Software and Affected Versions mailchimp-for-wp plugin versions prior to 4.1.8 Description The issue concerns a problem where the return value of add query arg can be exploited, leading to XSS. Recommendations For versions prior to 4.1.8, update to version 4.1.8 or later to...

PT-2019-7280

Name of the Vulnerable Software and Affected Versions shortcode-factory plugin versions prior to 1.1.1 for WordPress Description The issue is related to a Cross-Site Scripting XSS vulnerability. It occurs via the add query arg function. Recommendations For versions prior to 1.1.1, update to versi...

PT-2019-7255

Name of the Vulnerable Software and Affected Versions download-monitor plugin versions prior to 1.7.1 Description The issue is related to a Cross-Site Scripting XSS vulnerability. It affects the add query arg function. No information is provided about the estimated number of potentially affected...

PT-2019-7253

Name of the Vulnerable Software and Affected Versions all-in-one-wp-security-and-firewall plugin versions prior to 3.9.5 Description The issue concerns a cross-site scripting XSS problem in the add query arg and remove query arg function instances. This could potentially allow attackers to inject...

PT-2019-7264 · WordPress · Wp-Google-Map-Plugin

Name of the Vulnerable Software and Affected Versions: wp-google-map-plugin versions prior to 2.3.7 Description: The issue is related to Cross-Site Scripting XSS and involves the add query arg and remove query arg functions. Recommendations: For versions prior to 2.3.7, update to version 2.3.7 or...

DEBIAN-CVE-2017-14313

The shibbolethloginform function in shibboleth.php in the Shibboleth plugin before 1.8 for WordPress is prone to an XSS vulnerability due to improper use of addqueryarg...

PT-2017-13384

Name of the Vulnerable Software and Affected Versions Shibboleth plugin versions prior to 1.8 Description The issue arises from the improper use of add query arg in the shibboleth login form function within the Shibboleth plugin for WordPress, leading to an XSS vulnerability. Recommendations For...