22 matches found
Cross site scripting
WordPress version 4.8 + contains a Cross Site Scripting XSS vulnerability in plugins.php or core wordpress on delete function that can result in An attacker can perform client side attacks which could be from stealing a cookie to code injection. This attack appear to be exploitable via an attacke...
4.3CVSS6.2AI score0.00707EPSS
SaveExploits1References1Affected Software1
CVE-2018-1000556
WordPress version 4.8 + contains a Cross Site Scripting XSS vulnerability in plugins.php or core wordpress on delete function that can result in An attacker can perform client side attacks which could be from stealing a cookie to code injection. This attack appear to be exploitable via an attacke...
6.1CVSS6.4AI score0.00707EPSS
SaveExploits1References2
20