Lucene search
+L

4 matches found

CNVD
CNVD
•added 2025/07/30 12:00 a.m.•16 views

WordPress Get Youtube Subs Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress Get Youtube Subs, which stems from insufficient input cleanup and output escaping, and can be exploited by an...

6.4CVSS6.2AI score0.00404EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/07/24 12:00 a.m.•12 views

PT-2025-30660 · WordPress · Get Youtube Subs

Name of the Vulnerable Software and Affected Versions: Get Youtube Subs plugin for WordPress versions up to and including 3.5 Description: The Get Youtube Subs plugin for WordPress is susceptible to Stored Cross-Site Scripting through the channel, layout, and subs count parameters. Insufficient...

6.4CVSS5.8AI score0.00404EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/07/24 12:00 a.m.•12 views

WordPress plugin Get Youtube Subs 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress Get Youtube Subs, which stems from insufficient input cleanup and output escaping, and can be exploited by an...

6.4CVSS6.2AI score0.00404EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/24 12:00 a.m.•1 views

CVE-2025-7966: Improper Neutralization of Input During Web Page Generation

The Get Youtube Subs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘channel', 'layout', and 'subscount’ parameters in all versions up to, and including, 3.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

6.4CVSS6AI score0.00404EPSS
SaveExploits0References1
Rows per page
Query Builder