CVE-2023-34173

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Alexander Semikashev Yandex Metrica Counter plugin = 1.4.3 versions...

CVE-2023-33210

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in nuajik plugin = 0.1.0 versions...

CVE-2023-27426

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Notifyvisitors NotifyVisitors plugin = 1.0 versions...

CVE-2023-32962

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in HasTheme WishSuite – Wishlist for WooCommerce plugin = 1.3.4 versions...

PT-2023-24575 · Unknown · Joaquín Ruiz Easy Admin Menu

Name of the Vulnerable Software and Affected Versions: Joaquín Ruiz Easy Admin Menu plugin versions = 1.3 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For Joaquín Ruiz Easy Admin Menu...

CVE-2023-24394

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Gopi Ramasamy iframe popup plugin = 3.3 versions...

CVE-2023-32584

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in John Newcombe eBecas plugin = 3.1.3 versions...

CVE-2023-32591

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Cloud Primero B.V DBargain plugin = 3.0.0 versions...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Bill Minozzi Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection plugin = 7.31 versions...

CVE-2023-30786

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Benjamin Guy Captcha Them All plugin = 1.3.3 versions...

CVE-2023-30752

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Silvia Pfeiffer and Andrew Nimmo External Videos plugin = 2.0.1 versions...

CVE-2023-30477

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Essitco AFFILIATE Solution plugin = 1.0 versions...

CVE-2023-38397

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Eggemplo Gestion-Pymes plugin = 1.5.6 versions...

CVE-2023-38208 Validate Your Inputs | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)

Adobe Commerce versions 2.4.6-p1 and earlier, 2.4.5-p3 and earlier and 2.4.4-p4 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could lead to arbitrary code execution by an admin-privilege authenticated...

CVE-2023-28934

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Mammothology WP Full Stripe Free plugin = 1.6.1 versions...

CVE-2023-31221

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Ransom Christofferson PDQ CSV plugin = 1.0.0 versions...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Mammothology WP Full Stripe Free plugin = 1.6.1 versions...

CVE-2023-27415

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Themeqx LetterPress plugin = 1.1.2 versions...

CVE-2023-27422

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in NsThemes NS Coupon To Become Customer plugin = 1.2.2 versions...

PT-2023-22042 · Unknown · Never5 Post Connector

Name of the Vulnerable Software and Affected Versions: Never5 Post Connector plugin versions prior to 1.0.9 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with admin+ authentication. This type of vulnerability allows an attacker to inject...