CVE-2015-9374: Improper Neutralization of Input During Web Page Generation

Stripe Add-on for iThemes Exchange before 1.2.0 for WordPress has XSS via addqueryarg and removequeryarg...

PT-2019-7330

Name of the Vulnerable Software and Affected Versions Manual Purchases Add-on for iThemes Exchange version 1.1.0 and earlier Description The issue concerns a problem with the Manual Purchases Add-on for iThemes Exchange before version 1.1.0 for WordPress, where there is a potential for XSS via th...

CVE-2015-9364: Improper Neutralization of Input During Web Page Generation

2Checkout Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

PT-2019-7327

Name of the Vulnerable Software and Affected Versions iThemes Exchange Easy EU Value Added VAT Taxes Add-on for WordPress version prior to 1.2.0 Description The issue concerns a problem with the Easy EU Value Added VAT Taxes Add-on for iThemes Exchange before version 1.2.0 for WordPress. It...

CVE-2015-9370: Improper Neutralization of Input During Web Page Generation

Invoices Add-on for iThemes Exchange before 1.4.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9368: Improper Neutralization of Input During Web Page Generation

Easy EU Value Added VAT Taxes Add-on for iThemes Exchange before 1.2.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9371: Improper Neutralization of Input During Web Page Generation

Manual Purchases Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

PT-2019-7334

Name of the Vulnerable Software and Affected Versions Table Rate Shipping Add-on for iThemes Exchange version 1.1.0 and earlier Description The issue concerns a problem where an attacker can exploit the add query arg and remove query arg functions to perform a cross-site scripting XSS attack...

CVE-2015-9369: Improper Neutralization of Input During Web Page Generation

Easy US Sales Taxes Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

PT-2019-7331

Name of the Vulnerable Software and Affected Versions Membership Add-on for iThemes Exchange versions prior to 1.3.0 Description The issue concerns a problem with the add query arg and remove query arg functions, which can lead to XSS. Recommendations For versions prior to 1.3.0, update to versio...

PT-2019-7328

Name of the Vulnerable Software and Affected Versions Easy US Sales Taxes Add-on for iThemes Exchange versions prior to 1.1.0 Description The issue concerns a problem with the Easy US Sales Taxes Add-on for iThemes Exchange, where there is a potential for XSS Cross-Site Scripting attacks. This is...

PT-2019-7325

Name of the Vulnerable Software and Affected Versions Custom URL Tracking Add-on for iThemes Exchange version 1.1.0 and earlier Description The issue concerns a problem with Custom URL Tracking Add-on for iThemes Exchange, where there is a potential for XSS attacks. This is due to the use of add...

PT-2019-7333

Name of the Vulnerable Software and Affected Versions iThemes Exchange Stripe Add-on for WordPress version 1.2.0 and earlier Description The issue concerns a problem with the add query arg and remove query arg functions, which can lead to XSS. Recommendations For versions prior to 1.2.0, update t...

PT-2019-7332

Name of the Vulnerable Software and Affected Versions iThemes Exchange PayPal Pro Add-on for WordPress version prior to 1.1.0 Description The issue concerns a problem with the add query arg and remove query arg functions, which can lead to XSS. Recommendations For versions prior to 1.1.0, update ...

PT-2019-7324

Name of the Vulnerable Software and Affected Versions iThemes Exchange Authorize.net Add-on for WordPress version prior to 1.1.0 Description The issue concerns a problem with the add query arg and remove query arg functions, which can lead to XSS. Recommendations For versions prior to 1.1.0, upda...

PT-2019-7323

Name of the Vulnerable Software and Affected Versions 2Checkout Add-on for iThemes Exchange version 1.1.0 and earlier Description The issue concerns a problem with the add query arg and remove query arg functions, which can lead to XSS. Recommendations For versions prior to 1.1.0, update to versi...

CVE-2015-9367: Improper Neutralization of Input During Web Page Generation

Easy Canadian Sales Taxes Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

PT-2019-7326

Name of the Vulnerable Software and Affected Versions Easy Canadian Sales Taxes Add-on for iThemes Exchange versions prior to 1.1.0 Description The issue concerns a problem with the Easy Canadian Sales Taxes Add-on for iThemes Exchange, where there is a potential for XSS Cross-Site Scripting...

PT-2019-7329

Name of the Vulnerable Software and Affected Versions Invoices Add-on for iThemes Exchange versions prior to 1.4.0 Description The issue concerns a problem with the Invoices Add-on for iThemes Exchange, where there is a potential for XSS attacks. This is due to the use of add query arg and remove...

CVE-2019-11723

A vulnerability exists during the installation of add-ons where the initial fetch ignored the origin attributes of the browsing context. This could leak cookies in private browsing mode or across different "containers" for people who use the Firefox Multi-Account Containers Web Extension. This...