WordPress iThemes Exchange Invoices Add-on Cross-Site Scripting Vulnerability

iThemes Exchange for WordPress is a plugin for creating e-commerce websites using the WordPress content management system. iThemes Exchange for WordPress is one of the shopping invoices plugin. A cross-site scripting vulnerability exists in WordPress iThemes Exchange Invoices Add-on. An attacker...

WordPress iThemes Exchange Authorize.net Add-on Cross-Site Scripting Vulnerability

iThemes Exchange for WordPress is a plugin for creating e-commerce sites using the WordPress content management system. authorize.net Add-on is one of the Authorize Payment Gateway plugins. A cross-site scripting vulnerability exists in WordPress iThemes Exchange Authorize.net Add-on. An attacker...

CVE-2015-9374

Stripe Add-on for iThemes Exchange before 1.2.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9369

Easy US Sales Taxes Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9371

Manual Purchases Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

Design/Logic Flaw

Stripe Add-on for iThemes Exchange before 1.2.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9364

2Checkout Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

Design/Logic Flaw

Custom URL Tracking Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9375

Table Rate Shipping Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9374

Stripe Add-on for iThemes Exchange before 1.2.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9372

Membership Add-on for iThemes Exchange before 1.3.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9368

Easy EU Value Added VAT Taxes Add-on for iThemes Exchange before 1.2.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9366

CVE-2015-9366 affects the Custom URL Tracking Add-on for iThemes Exchange (WordPress) prior to version 1.1.0. The vulnerability is an XSS via add_query_arg() and remove_query_arg(). The NVD data lists CVSSv2 base score 4.3 (MEDIUM) with I:P and A:N, and CVSSv3 base score 6.1 (MEDIUM) with I:L, C:...

CVE-2015-9365

The CVE-2015-9365 entry concerns the WordPress plugin component: Authorize.net Add-on for iThemes Exchange, affected on versions before 1.1.0. The vulnerability is a cross-site scripting (XSS) issue exploitable via add_query_arg() and remove_query_arg(), as described in multiple sources (NVD entr...

CVE-2015-9364

2Checkout Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9366: Improper Neutralization of Input During Web Page Generation

Custom URL Tracking Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9375: Improper Neutralization of Input During Web Page Generation

Table Rate Shipping Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9365: Improper Neutralization of Input During Web Page Generation

Authorize.net Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9372: Improper Neutralization of Input During Web Page Generation

Membership Add-on for iThemes Exchange before 1.3.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9373: Improper Neutralization of Input During Web Page Generation

PayPal Pro Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...