552 matches found
CVE-2018-20966
The CVE-2018-20966 entry documents a cross-site scripting (XSS) vulnerability in the WordPress plugin Woocommerce Jetpack before version 3.8.0, specifically in the Products Per Page feature. Affected software: woocommerce-jetpack plugin for WordPress. Root cause: lack of proper validation of clie...
CVE-2018-20966
The woocommerce-jetpack plugin before 3.8.0 for WordPress has XSS in the Products Per Page feature...
CVE-2018-20966: Improper Neutralization of Input During Web Page Generation
The woocommerce-jetpack plugin before 3.8.0 for WordPress has XSS in the Products Per Page feature...
PT-2019-10402
Name of the Vulnerable Software and Affected Versions woocommerce-jetpack plugin versions prior to 3.8.0 Description The issue concerns a cross-site scripting XSS flaw in the Products Per Page feature of the plugin. Recommendations For versions prior to 3.8.0, update to version 3.8.0 or later to...
WordPress Caldera Forms plugin <= 1.8.1 - Unspecified security issue related to Caldera Forms Pro API
Unspecified security issue found and patched in WordPress Caldera Forms plugin versions = 1.8.1. Vulnerable only when connected to Caldera Forms Pro API and used with WordPress SEO by Yoast or Jetpack’s map module. Solution Update the WordPress Caldera Forms plugin to the latest available version...
WordPress Jetpack plugin <= 6.4.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability found by RIPS Technologies in WordPress Jetpack plugin versions = 6.4.2. Solution Update the WordPress Jetpack plugin to the latest available version at least 6.5...
Jetpack <= 6.4.2 - Authenticated Stored Cross-Site Scripting (XSS)
According to RIPS Technologies: "RIPS detected a Stored XSS vulnerability that affects a module available to premium and professional users of Jetpack. Attackers who gained control over an account on the target site with at least Contributor privileges were able to inject arbitrary JavaScript cod...
Automattic: Stored XSS in Jetpack's Simple Payment Module by Contributors / Authors
Jetpack's implementation of the Simple Payment Module is as follows: A custom post type is registered for each product. When an admin creates a product, a post is internally created and information about the product, such as the price is then stored as post meta information. After the post has be...
Woocommerce Jetpack <= 3.7.0 - XSS
The Booster for WooCommerce WordPress plugin was affected by a XSS security vulnerability...
WordPress Jetpack plugin cross-site scripting vulnerability (CNVD-2018-01270)
WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up a personal blog site. Jetpack is one of the plugin package contains a variety of features such as social sharing, social login and social...
WordPress Jetpack plugin cross-site scripting vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up a personal blog site. Jetpack is one of the plugin package contains a variety of features such as social sharing, social login and social...
Design/Logic Flaw
The Jetpack plugin before 4.0.4 for WordPress has XSS via the Likes module...
CVE-2016-10705
The Jetpack plugin before 4.0.4 for WordPress has XSS via the Likes module...
CVE-2016-10706
The Jetpack plugin before 4.0.3 for WordPress has XSS via a crafted Vimeo link...
CVE-2016-10706
The Jetpack plugin before 4.0.3 for WordPress has XSS via a crafted Vimeo link...
CVE-2016-10705
The Jetpack plugin before 4.0.4 for WordPress has XSS via the Likes module...
Design/Logic Flaw
The Jetpack plugin before 4.0.3 for WordPress has XSS via a crafted Vimeo link...
CVE-2016-10705
The Jetpack plugin before 4.0.4 for WordPress has XSS via the Likes module...
CVE-2016-10705
The CVE-2016-10705 entry concerns the Jetpack WordPress plugin prior to version 4.0.4, where the Likes module allows cross-site scripting (XSS). The vulnerability is documented across multiple sources (NVD, Red Hat security, CVE databases, WPVulndb) with consistent wording: XSS via the Likes modu...