CVE-2015-9371: Improper Neutralization of Input During Web Page Generation

Manual Purchases Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

PT-2019-7330

Name of the Vulnerable Software and Affected Versions Manual Purchases Add-on for iThemes Exchange version 1.1.0 and earlier Description The issue concerns a problem with the Manual Purchases Add-on for iThemes Exchange before version 1.1.0 for WordPress, where there is a potential for XSS via th...