1001 matches found
CVE-2023-25792
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in XiaoMac WP Open Social plugin = 5.0 versions...
PT-2023-19222 · Unknown · Sergey Panasenko Sponsors Carousel
Name of the Vulnerable Software and Affected Versions: Sergey Panasenko Sponsors Carousel plugin versions prior to 4.02 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin or higher privileges. Recommendations: For versions...
CVE-2023-23723
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Winwar Media WP Email Capture plugin = 3.9.3 versions...
CVE-2023-23723: Improper Neutralization of Input During Web Page Generation
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Winwar Media WP Email Capture plugin = 3.9.3 versions...
CVE-2023-25461
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in namithjawahar Wp-Insert plugin = 2.5.0 versions...
CVE-2023-25485
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Bernhard Kux JSON Content Importer plugin = 1.3.15 versions...
CVE-2023-25490
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Eric Teubert Archivist – Custom Archive Templates plugin = 1.7.4 versions...
PT-2023-20104 · WordPress · Bernhard Kux Json Content Importer
Name of the Vulnerable Software and Affected Versions: Bernhard Kux JSON Content Importer plugin versions prior to 1.3.16 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin or higher privileges. Recommendations: For version...
CVE-2023-23816
Auth. admin+ Cross-Site Scripting XSS vulnerability in Twardes Sitemap Index plugin = 1.2.3 versions...
CVE-2022-47435
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Olive Design WP-OliveCart plugin = 1.1.3 versions...
PT-2023-15311
Name of the Vulnerable Software and Affected Versions Olive Design WP-OliveCart plugin versions prior to 1.1.4 Description The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with admin+ authentication. Recommendations For Olive Design WP-OliveCart plugin...
CVE-2022-43480
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Magneticlab Sàrl Homepage Pop-up plugin = 1.2.5 versions...
PT-2023-14541
Name of the Vulnerable Software and Affected Versions BestWebSoft Car Rental by BestWebSoft plugin versions prior to 1.1.3 Description The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with admin+ authentication. This type of vulnerability allows an attack...
CVE-2023-27610: Improper Neutralization of Special Elements used in an SQL Command
Auth. admin+ SQL Injection SQLi vulnerability in TransbankDevelopers Transbank Webpay REST plugin = 1.6.6 versions...
CVE-2022-44625
The CVE CVE-2022-44625 affects the WordPress plugin Zephilou Cyklodev WP Notify (versions
CVE-2023-29170
Auth. admin+ Stored Cross-site Scripting XSS vulnerability in PI Websolution Product Enquiry for WooCommerce, WooCommerce product catalog plugin = 2.2.12 versions...
CVE-2023-23799
Auth. admin+ Stored Cross-site Scripting XSS vulnerability in Leonardo Giacone Easy Panorama plugin = 1.1.4 versions...
CVE-2023-25702
Auth. admin+ Stored Cross-site Scripting XSS vulnerability in Fullworks Quick Paypal Payments plugin = 5.7.25 versions...
