CVE-2022-4747: Undefined Security Weakness

The Post Category Image With Grid and Slider WordPress plugin before 1.4.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be...

CVE-2023-0148: Undefined Security Weakness

The Gallery Factory Lite WordPress plugin through 2.0.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2022-4833: Undefined Security Weakness

The YourChannel: Everything you want in a YouTube plugin WordPress plugin before 1.2.3 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...

CVE-2022-4717: Undefined Security Weakness

The Strong Testimonials WordPress plugin before 3.0.3 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...

CVE-2022-4664: Undefined Security Weakness

The Logo Slider WordPress plugin before 3.6.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2022-4824: Improper Neutralization of Input During Web Page Generation

The WP Blog and Widgets WordPress plugin before 2.3.1 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...

CVE-2022-4677: Undefined Security Weakness

The Leaflet Maps Marker WordPress plugin before 3.12.7 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack...

CVE-2023-0062: Undefined Security Weakness

The EAN for WooCommerce WordPress plugin before 4.4.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

WordPress plugin Clean Login 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

PT-2023-16042

Name of the Vulnerable Software and Affected Versions Vimeo Video Autoplay Automute WordPress plugin version 1.0 Description The issue concerns a lack of validation and escaping of certain shortcode attributes in the Vimeo Video Autoplay Automute WordPress plugin. This could allow users with the...

PT-2023-15402

Name of the Vulnerable Software and Affected Versions My YouTube Channel WordPress plugin versions prior to 3.23.0 Description The issue concerns a lack of validation and escaping of certain shortcode attributes, which can lead to Stored Cross-Site Scripting attacks. Users with a role as low as...

PT-2023-16064

Name of the Vulnerable Software and Affected Versions Annual Archive WordPress plugin versions prior to 1.6.0 Description The issue allows users with the contributor role and above to perform Stored Cross-Site Scripting attacks due to the lack of validation and escaping of some shortcode...

PT-2023-14975

Name of the Vulnerable Software and Affected Versions Logo Slider WordPress plugin versions prior to 3.6.0 Description The issue is related to the Logo Slider WordPress plugin not validating and escaping some of its shortcode attributes before outputting them back in a page or post where the...

PT-2023-14889

Name of the Vulnerable Software and Affected Versions PPWP WordPress plugin versions prior to 1.8.6 Description The issue allows users with a low role, such as contributor, to perform Stored Cross-Site Scripting attacks against high-privilege users like admins, due to the lack of validation and...

PT-2023-15646

Name of the Vulnerable Software and Affected Versions WP-ShowHide WordPress plugin versions prior to 1.05 Description The issue allows users with a role as low as contributor to perform Stored Cross-Site Scripting attacks, which could be used against high privilege users such as admins. This is d...

PT-2023-15635

Name of the Vulnerable Software and Affected Versions WP Blog and Widgets WordPress plugin versions prior to 2.3.1 Description The issue allows users with a role as low as contributor to perform Stored Cross-Site Scripting attacks, which could be used against high privilege users such as admins...

PT-2023-15979

Name of the Vulnerable Software and Affected Versions EAN for WooCommerce WordPress plugin versions prior to 4.4.3 Description The issue concerns the EAN for WooCommerce WordPress plugin, which does not properly validate and escape certain shortcode attributes before outputting them in a page or...

PT-2023-15987

Name of the Vulnerable Software and Affected Versions ResponsiveVoice Text To Speech WordPress plugin versions prior to 1.7.7 Description The issue allows users with the contributor role and above to perform Stored Cross-Site Scripting attacks due to the plugin's failure to validate and escape so...

CVE-2023-0171: Undefined Security Weakness

The jQuery T- Countdown Widget WordPress plugin before 2.3.24 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting...

WordPress Plugin Gallery Factory Lite 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...