PT-2019-7331

Name of the Vulnerable Software and Affected Versions Membership Add-on for iThemes Exchange versions prior to 1.3.0 Description The issue concerns a problem with the add query arg and remove query arg functions, which can lead to XSS. Recommendations For versions prior to 1.3.0, update to versio...

PT-2019-7323

Name of the Vulnerable Software and Affected Versions 2Checkout Add-on for iThemes Exchange version 1.1.0 and earlier Description The issue concerns a problem with the add query arg and remove query arg functions, which can lead to XSS. Recommendations For versions prior to 1.1.0, update to versi...

PT-2019-7337

Name of the Vulnerable Software and Affected Versions iThemes Builder Theme Market versions prior to 5.1.27 Description The issue concerns a problem with the add query arg and remove query arg functions, which can lead to XSS. Recommendations For versions prior to 5.1.27, update to version 5.1.27...

PT-2019-7335

Name of the Vulnerable Software and Affected Versions iThemes Mobile version 1.2.7 and earlier Description The issue is related to cross-site scripting XSS and involves the functions add query arg and remove query arg. Recommendations For iThemes Mobile version 1.2.7 and earlier, update to versio...

PT-2019-7326

Name of the Vulnerable Software and Affected Versions Easy Canadian Sales Taxes Add-on for iThemes Exchange versions prior to 1.1.0 Description The issue concerns a problem with the Easy Canadian Sales Taxes Add-on for iThemes Exchange, where there is a potential for XSS Cross-Site Scripting...

PT-2019-7317

Name of the Vulnerable Software and Affected Versions feedwordpress plugin versions prior to 2015.0514 Description The issue concerns a cross-site scripting XSS problem. It is related to the use of add query arg and remove query arg functions. Recommendations For versions prior to 2015.0514, upda...

PT-2019-7253

Name of the Vulnerable Software and Affected Versions all-in-one-wp-security-and-firewall plugin versions prior to 3.9.5 Description The issue concerns a cross-site scripting XSS problem in the add query arg and remove query arg function instances. This could potentially allow attackers to inject...

PT-2019-7264 · WordPress · Wp-Google-Map-Plugin

Name of the Vulnerable Software and Affected Versions: wp-google-map-plugin versions prior to 2.3.7 Description: The issue is related to Cross-Site Scripting XSS and involves the add query arg and remove query arg functions. Recommendations: For versions prior to 2.3.7, update to version 2.3.7 or...