9456 matches found
CVE-2023-35094
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Julien Berthelot / MPEmbed WP Matterport Shortcode plugin = 2.1.4 versions...
Cross site scripting
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Julien Berthelot / MPEmbed WP Matterport Shortcode plugin = 2.1.4 versions...
CVE-2023-27621
CVE-2023-27621 affects the WordPress Livestream Notice plugin (MrDemonWolf Livestream Notice) with versions
CVE-2023-24401
CVE-2023-24401 is a Stored XSS vulnerability in the WordPress plugin Davidsword Mobile Call Now & Map Buttons (versions
CVE-2023-28415
The CVE-2023-28415 entry concerns the WordPress Side Cart Woocommerce (Ajax) plugin (Admin+ stored XSS). Affected versions are
CVE-2023-28692 WordPress WP Abstracts Plugin <= 2.6.3 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Kevon Adonis WP Abstracts plugin = 2.6.3 versions...
CVE-2023-34372
CVE-2023-34372 affects the Didier Sampaolo SpamReferrerBlock WordPress plugin (
CVE-2023-34004
CVE-2023-34004 affects the WordPress plugin WooCommerce Box Office, specifically versions up to and including 1.1.50. The vulnerability is a Stored Cross-Site Scripting (XSS) that can be triggered by authenticated users with contributor-level permissions. The issue is resolved in version 1.1.51 o...
CVE-2023-34187
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Alan Tien Call Now Icon Animate plugin = 0.1.0 versions...
CVE-2023-34172 WordPress WordPress Social Login Plugin <= 3.0.4 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Miled WordPress Social Login plugin = 3.0.4 versions...
CVE-2023-27426
CVE-2023-27426 : WordPress NotifyVisitors Lead Form plugin (
CVE-2023-33929 WordPress Easy Admin Menu Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Joaquín Ruiz Easy Admin Menu plugin = 1.3 versions...
CVE-2023-25462
The CVE-2023-25462 vulnerability is a Stored XSS in the WP htaccess Control plugin (
Cross site scripting
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in WooCommerce WooCommerce Brands plugin = 1.6.45 versions...
CVE-2023-32962
CVE-2023-32962 affects HasTheme WishSuite – Wishlist for WooCommerce plugin (WordPress). The vulnerability is a Stored Cross-Site Scripting (XSS) that requires admin+ authentication. A fix exists: update to version higher than 1.3.4 (PatchStack lists 1.3.5 as the patched release). Public referenc...
CVE-2023-32962 WordPress WishSuite Plugin <= 1.3.4 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in HasTheme WishSuite – Wishlist for WooCommerce plugin = 1.3.4 versions...
CVE-2023-32793
CVE-2023-32793 affects the WordPress WooCommerce Pre-Orders plugin 2.0.0, specifically 2.0.1 or later, to mitigate the issue. Monitor for updates from the plugin maintainers and security advisories for any additional context or indicators of active exploitation.
PT-2023-4750
Name of the Vulnerable Software and Affected Versions Red Hat Ansible affected versions not specified Description The issue is related to the lack of protection of the SQL query structure in Red Hat Ansible's configuration management system. Exploitation of this issue could allow a remote attacke...
HighPlus CMS 0.1.3 SQL Injection
==================================================================================================================================== | Title : HighPlus CMS v0.1.3 Auth By pass Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 63.0.3 32-bit ...