1116 matches found
CVE-2017-18553
The ad-buttons plugin before 2.3.2 for WordPress has XSS...
Cross site scripting
The ad-buttons plugin before 2.3.2 for WordPress has XSS...
CVE-2017-18553
CVE-2017-18553 : The WordPress ad-buttons plugin prior to 2.3.2 contains a cross-site scripting (XSS) vulnerability in its input handling. Multiple sources corroborate the flaw across CVE records and national vulnerability databases. The vulnerability information provided indicates an XSS impact ...
CVE-2017-18553
The ad-buttons plugin before 2.3.2 for WordPress has XSS...
CVE-2017-18553: Improper Neutralization of Input During Web Page Generation
The ad-buttons plugin before 2.3.2 for WordPress has XSS...
WordPress social-buttons-pack plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. social-buttons-pack plugin is a social sharing plugin used in it. A cross-site scripting vulnerability exists in WordPress...
WordPress simple-share-buttons-adder plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. simple-share-buttons-adder plugin is used in one of the share buttons to add a plugin. A cross-site scripting vulnerability...
CVE-2017-18500
The social-buttons-pack plugin before 1.1.1 for WordPress has multiple XSS issues...
CVE-2017-18500
The social-buttons-pack plugin before 1.1.1 for WordPress has multiple XSS issues...
CVE-2015-9303
The simple-share-buttons-adder plugin before 6.0.0 for WordPress has XSS...
CVE-2015-9303
CVE-2015-9303 affects the WordPress plugin Simple Share Buttons Adder, specifically versions prior to 6.0.0. Multiple connected sources describe a cross-site scripting (XSS) vulnerability in this plugin, with evidence of a reflected XSS class in public disclosures. The root cause is insufficient ...
CVE-2017-18500
The social-buttons-pack plugin before 1.1.1 for WordPress has multiple XSS issues...
CVE-2017-18500: Improper Neutralization of Input During Web Page Generation
The social-buttons-pack plugin before 1.1.1 for WordPress has multiple XSS issues...
CVE-2015-9303: Improper Neutralization of Input During Web Page Generation
The simple-share-buttons-adder plugin before 6.0.0 for WordPress has XSS...
AddToAny Share Buttons - Moderately critical - Cross Site Scripting - SA-CONTRIB-2019-039
This module enables you to add social media share buttons on your website to its content and pages. The module doesn't sufficiently mark its administration permission restricted, allowing cross site scripting vulnerabilities to users who have access to its admin settings. This vulnerability is...
WordPress Simple Social Buttons Plugin 2.0.4 < 2.0.22 Privilege Escalation Vulnerability
The WordPress plugin Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...
Critical WordPress Plugin Flaw Allows Complete Website Takeover
A critical vulnerability in popular WordPress plugin Simple Social Buttons enables non-admin users to modify WordPress installation options – and ultimately take over websites. Simple Social Buttons enables users to add social-media sharing buttons to various locations of their websites. The plug...
WordPress Social Pug - Easy Social Share Buttons Plugin Cross-Site Scripting Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up personal blog site.Social Pug-Easy Social Share Buttons Plugin is used in one of the social platform sharing plugin. A cross-site scriptin...
CVE-2016-10736
The "Social Pug - Easy Social Share Buttons" plugin before 1.2.6 for WordPress allows XSS via the wp-admin/admin.php?page=dpsp-toolkit dpspmessageclass parameter...
CVE-2016-10736
CVE-2016-10736 affects the WordPress plugin Social Pug - Easy Social Share Buttons, before version 1.2.6. The vulnerability is an XSS in the wp-admin/admin.php?page=dpsp-toolkit with the dpsp_message_class parameter. Public sources (NVD entry and multiple vulnerability databases) describe it as a...