CVE-2022-4785: Undefined Security Weakness

The Video Sidebar Widgets WordPress plugin through 6.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2022-4750: Undefined Security Weakness

The WP Responsive Testimonials Slider And Widget WordPress plugin through 1.5 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored...

CVE-2022-4761: Undefined Security Weakness

The Post Views Count WordPress plugin through 3.0.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2022-4777: Improper Neutralization of Input During Web Page Generation

The Bootstrap Shortcodes WordPress plugin through 3.4.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2022-4669: Improper Neutralization of Input During Web Page Generation

The Page Builder: Live Composer WordPress plugin before 1.5.23 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting...

PT-2023-16346

Name of the Vulnerable Software and Affected Versions GS Filterable Portfolio WordPress plugin versions prior to 1.6.1 Description The issue concerns the GS Filterable Portfolio WordPress plugin, which does not properly validate and escape certain shortcode attributes before outputting them in a...

PT-2023-16257

Name of the Vulnerable Software and Affected Versions Shortcode for Font Awesome WordPress plugin versions prior to 1.4.1 Description The issue concerns the Shortcode for Font Awesome WordPress plugin, which does not properly validate and escape some of its shortcode attributes before outputting...

PT-2023-15976

Name of the Vulnerable Software and Affected Versions Youzify WordPress plugin versions prior to 1.2.2 Description The issue is related to the Youzify WordPress plugin not validating and escaping some of its shortcode attributes before outputting them back in a page or post where the shortcode is...

PT-2023-16221

Name of the Vulnerable Software and Affected Versions EmbedSocial WordPress plugin versions prior to 1.1.28 Description The issue is related to the EmbedSocial WordPress plugin, which does not validate and escape some of its shortcode attributes before outputting them back in a page or post where...

PT-2023-15492

Name of the Vulnerable Software and Affected Versions The Video Sidebar Widgets WordPress plugin versions through 6.1 Description The issue concerns a lack of validation and escaping of certain shortcode attributes in the plugin, which could allow users with the contributor role and above to...

PT-2023-15391

Name of the Vulnerable Software and Affected Versions The Easy Social Box / Page Plugin WordPress plugin versions through 4.1.2 Description The issue concerns a lack of validation and escaping of certain shortcode attributes, which could allow users with the contributor role and above to perform...

PT-2023-15448

Name of the Vulnerable Software and Affected Versions The Simple File Downloader WordPress plugin versions 1.0.0 through 1.0.4 Description The issue concerns the lack of validation and escaping of certain shortcode attributes in the plugin, which can lead to Stored Cross-Site Scripting attacks...

PT-2023-14991

Name of the Vulnerable Software and Affected Versions The Page Builder: Live Composer WordPress plugin versions prior to 1.5.23 Description The issue concerns the lack of validation and escaping of certain shortcode attributes in the plugin, which could allow users with the contributor role and...

PT-2023-15432

Name of the Vulnerable Software and Affected Versions Post Views Count WordPress plugin versions 3.0.2 and earlier Description The issue allows users with the contributor role and above to perform Stored Cross-Site Scripting attacks due to the plugin not validating and escaping some of its...

PT-2023-14983

Name of the Vulnerable Software and Affected Versions The Markup JSON-LD structured in schema.org WordPress plugin versions 4.8.1 and earlier Description The issue concerns a failure to validate and escape certain shortcode attributes in the plugin, which could allow users with the contributor ro...

PT-2023-14858

Name of the Vulnerable Software and Affected Versions Login Logout Menu WordPress plugin versions 1.3.3 and earlier Description The issue is related to the lack of validation and escaping of some shortcode attributes in the Login Logout Menu WordPress plugin, which could allow users with the...

PT-2023-15483

Name of the Vulnerable Software and Affected Versions Bootstrap Shortcodes WordPress plugin versions 3.4.0 and earlier Description The issue concerns the failure to validate and escape certain shortcode attributes, which could allow users with the contributor role and above to perform Stored...

PT-2023-15495

Name of the Vulnerable Software and Affected Versions Video.js WordPress plugin versions through 4.5.0 Description The issue concerns the Video.js WordPress plugin, which does not properly validate and escape certain shortcode attributes before outputting them in a page or post where the shortcod...

PT-2023-15984 · WordPress · Timed Content

Name of the Vulnerable Software and Affected Versions: Timed Content WordPress plugin versions prior to 2.73 Description: The issue concerns the Timed Content WordPress plugin, which does not properly validate and escape some of its shortcode attributes before outputting them in a page or post...

PT-2023-15380 · WordPress · Wp Responsive Testimonials Slider/Widget

Name of the Vulnerable Software and Affected Versions: WP Responsive Testimonials Slider And Widget WordPress plugin versions 1.5 and earlier Description: The issue concerns the WP Responsive Testimonials Slider And Widget WordPress plugin, which does not properly validate and escape some of its...