PT-2024-36278 · WordPress · Matt Walters Wordpress Filter

Name of the Vulnerable Software and Affected Versions: Matt Walters WordPress Filter versions 1.4.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...

PT-2024-36670 · Unknown · Stop Registration Spam

Name of the Vulnerable Software and Affected Versions: Stop Registration Spam versions 1.23 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application...

PT-2024-36316 · Unknown · Linda Macphee-Cobb Category Of Posts

Name of the Vulnerable Software and Affected Versions: Linda MacPhee-Cobb Category of Posts versions n/a through 1.0 Description: The issue is related to a Cross-Site Request Forgery CSRF problem that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on...

PT-2024-36284 · Unknown · Go Animate

Name of the Vulnerable Software and Affected Versions: Go Animate versions 1.0 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application, and also...

PT-2024-36331 · Bluesky · Blueskyy Wp-Ban-User

Name of the Vulnerable Software and Affected Versions: blueskyy WP-Ban-User versions 1.0 and earlier Description: A Cross-Site Request Forgery CSRF issue in blueskyy WP-Ban-User allows Stored XSS. This means an attacker can perform actions on behalf of a user without their knowledge, potentially...

PT-2024-36312 · Unknown · Jesse Overright Social Media Sharing

Name of the Vulnerable Software and Affected Versions: Jesse Overright Social Media Sharing versions n/a through 1.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a we...

PT-2024-36304 · WordPress · Login With Ajax

Name of the Vulnerable Software and Affected Versions: Wp Login with Ajax versions 0.6 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application, and...

WordPress FluentForm plugin <= 5.2.6 - Unauthenticated Stored Cross-Site Scripting via Form Subject vulnerability

Unauthenticated Stored Cross-Site Scripting via Form Subject vulnerability discovered by mikemyers in WordPress Plugin FluentForm versions = 5.2.6...

PT-2024-36237 · Unknown · Fancy Roller Scroller

Name of the Vulnerable Software and Affected Versions: Fancy Roller Scroller versions through 1.4.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application,...

WordPress Hello in All Languages plugin <= 1.0.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by Rei Kobayashi in WordPress Plugin Hello In All Languages versions = 1.0.6...

CVE-2024-52858

Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...

CVE-2024-43736

Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...

PT-2024-17337 · WordPress · 코드엠샵 소셜톡

Name of the Vulnerable Software and Affected Versions: 코드엠샵 소셜톡 plugin for WordPress version 1.2.0 and earlier Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'msntt add plus talk' shortcode due to insufficient input sanitization and output escaping on...

WordPress WPC Smart Quick View for WooCommerce plugin <= 4.1.1 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library

Authenticated Contributor+ Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library vulnerability discovered by Webbernaut in WordPress Plugin WPC Smart Quick View for WooCommerce versions = 4.1.1...

PT-2024-35832 · Icestats · Icestats

Name of the Vulnerable Software and Affected Versions: IceStats versions n/a through 1.3 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application, and also stor...

PT-2024-35823 · WordPress · Wp Auto Top

Name of the Vulnerable Software and Affected Versions: wp auto top versions prior to 2.9.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application,...

PT-2024-35839 · Unknown · April'S Call Posts

Name of the Vulnerable Software and Affected Versions: April's Call Posts versions n/a through 2.1.1 Description: The issue is related to a Cross-Site Request Forgery CSRF problem that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...

PT-2024-35888 · Donate Me · Donate Me

Name of the Vulnerable Software and Affected Versions: Donate Me versions 1.2.5 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application,...

PT-2024-35825 · Unknown · Multi Feed Reader

Name of the Vulnerable Software and Affected Versions: Multi Feed Reader versions prior to 2.2.4 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...

PT-2024-35891 · Yahoo · Max Engel Yahoo! Webplayer

Name of the Vulnerable Software and Affected Versions: Max Engel Yahoo! WebPlayer versions n/a through 2.0.6 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can perform actions on behalf of a user without their knowledge or...