6491 matches found
CVE-2024-13625
The CVE-2024-13625 entry affects the Tube Video Ads Lite WordPress plugin (versions up to 1.5.7). The vulnerability is a Reflected Cross-Site Scripting caused by insufficient sanitization/escaping of an input parameter, which can be triggered in the page output and could impact high-privilege use...
CVE-2024-13625 Tube Video Ads Lite <= 1.5.7 - Reflected XSS
The Tube Video Ads Lite WordPress plugin through 1.5.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
PT-2025-6585
Name of the Vulnerable Software and Affected Versions Tube Video Ads Lite WordPress plugin versions 1.5.7 and earlier Description The issue arises from the plugin's failure to sanitise and escape a parameter before outputting it back in the page. This leads to a Reflected Cross-Site Scripting tha...
CVE-2024-7052
The Forminator Forms WordPress plugin before 1.38.3 does not sanitise and escape some of its settings, which could allow high privilege users such as Admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2024-13493
The Sensly Online Presence WordPress plugin through 0.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2025-0692
The Simple Video Management System WordPress plugin through 1.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite...
CVE-2024-12586
The Chalet-Montagne.com Tools WordPress plugin through 2.7.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2024-13119
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress plugin before 4.15.20 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even wh...
CVE-2024-13125
The Everest Forms WordPress plugin before 3.0.8.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2024-13121
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress plugin before 4.15.20 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even wh...
CVE-2024-13306
The Maps Plugin using Google Maps for WordPress WordPress plugin before 1.9.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in...
CVE-2024-13208
The Maps Plugin using Google Maps for WordPress WordPress plugin before 1.9.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in...
CVE-2024-13306
CVE-2024-13306 affects the Maps Plugin using Google Maps for WordPress (WP Google Map) prior to version 1.9.4. The vulnerability arises from insufficient sanitisation/escaping of certain plugin settings, enabling stored XSS by high-privilege users (e.g., admins), including scenarios where unfilte...
CVE-2024-13208 WP Google Map < 1.9.4 - Admin+ Stored XSS
The Maps Plugin using Google Maps for WordPress WordPress plugin before 1.9.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in...
PT-2025-6538 · WordPress · Maps Plugin
Name of the Vulnerable Software and Affected Versions: The Maps Plugin using Google Maps for WordPress versions prior to 1.9.4 Description: The issue concerns a Stored Cross-Site Scripting attack that can be performed by high-privilege users, such as administrators, due to the plugin's failure to...
PT-2025-6535 · WordPress · Maps Plugin Using Google Maps
Name of the Vulnerable Software and Affected Versions: Maps Plugin using Google Maps for WordPress versions prior to 1.9.4 Description: The issue concerns the Maps Plugin using Google Maps for WordPress, where versions prior to 1.9.4 do not properly sanitise and escape some of its settings. This...
SUSE CVE-2023-31347
Due to a code bug in SecureTSC, SEV firmware may allow an attacker with high privileges to cause a guest to observe an incorrect TSC when Secure TSC is enabled potentially resulting in a loss of guest integrity...
CVE-2024-7052
The Forminator Forms WordPress plugin before 1.38.3 does not sanitise and escape some of its settings, which could allow high privilege users such as Admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2024-7052
CVE-2024-7052 affects the WordPress plugin Forminator Forms . The vulnerability arises from inadequate sanitisation/escaping of certain plugin settings, enabling a high-privilege user (e.g., Admin) to perform a stored cross‑site scripting (XSS) attack even when the unfiltered_html capability is d...