CVE-2023-24394

CVE-2023-24394 is a stored XSS vulnerability in the WordPress plugin iframe-popup (Gopi Ramasamy) for versions

CVE-2023-30489

The CVE-2023-30489 entry corresponds to the WordPress Email Subscription Popup Plugin by I Thirteen Web Solution. Affected versions are

CVE-2023-3186

The Popup by Supsystic WordPress plugin before 1.10.19 has a prototype pollution vulnerability that could allow an attacker to inject arbitrary properties into Object.prototype...

Buffer overflow

The Popup by Supsystic WordPress plugin before 1.10.19 has a prototype pollution vulnerability that could allow an attacker to inject arbitrary properties into Object.prototype...

CVE-2023-23641 WordPress Uji Popup Plugin <= 1.4.3 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in WPmanage Uji Popup plugin = 1.4.3 versions...

CVE-2023-24406

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Muneeb ur Rehman Simple PopUp plugin = 1.8.6 versions...

CVE-2023-24406

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Muneeb ur Rehman Simple PopUp plugin = 1.8.6 versions...

CVE-2023-24406

The CVE-2023-24406 entry describes a Stored XSS in WordPress Simple Popup Images Plugin (admin+). Affected: Simple Popup plugin, versions

WordPress Uji Popup Plugin <= 1.4.3 is vulnerable to Cross Site Scripting (XSS)

Software Uji Popup Type Plugin Vulnerable versions = 1.4.3 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-23641 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 59d88f6966b4 Credits István Márton Required privileg...

WordPress Zyrex Popup Plugin <= 1.0 is vulnerable to Arbitrary File Upload

Software Zyrex Popup Type Plugin Vulnerable versions = 1.0 Fixed in 1.1 OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE CVE-2023-0924 Patch priority Low CVSS severity Low 9.1 Developer Claim ownership PSID 902b3bcce78c Credits Yogesh Verma Required privilege Administrator...

CVE-2023-24003

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Timersys WP Popups – WordPress Popup plugin = 2.1.4.8 versions...

Cross site scripting

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Timersys WP Popups – WordPress Popup plugin = 2.1.4.8 versions...

CVE-2023-24006

Auth. admin+ Cross-Site Scripting XSS vulnerability in Link Software LLC WP Terms Popup plugin = 2.6.0 versions...

CVE-2023-24004

The CVE-2023-24004 entry concerns a Stored XSS in the WordPress plugin WPdevart Image and Video Lightbox, Image PopUp, affecting versions

CVE-2022-47610

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Mr Digital Simple Image Popup plugin = 1.3.6 versions...

CVE-2022-47610

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Mr Digital Simple Image Popup plugin = 1.3.6 versions...

CVE-2022-47610

The CVE-2022-47610 entry concerns the WordPress plugin Simple Image Popup (Mr Digital Simple Image Popup) with vulnerable versions up to 1.3.6. The underlying issue is a stored Cross-Site Scripting (XSS) flaw arising from inadequate sanitization/escaping of plugin settings, enabling a high-privil...

CVE-2015-10095

A vulnerability classified as problematic has been found in woo-popup Plugin up to 1.2.2 on WordPress. This affects an unknown part of the file admin/class-woo-popup-admin.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.3...

CVE-2015-10095

The CVE-2015-10095 entry applies to the woo-popup WordPress plugin (versions up to 1.2.2) and involves an unknown part of the file admin/class-woo-popup-admin.php. The vulnerability enables cross-site scripting (XSS) and can be exploited remotely. The fixed version is 1.3.0, with the patch identi...

WordPress plugin woo-popup 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...