PT-2023-30351 · WordPress · Wpdiscuz

Name of the Vulnerable Software and Affected Versions: wpDiscuz plugin versions 7.6.11 and earlier Description: The issue is related to an Unauth. Stored Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website, which can the...

CVE-2023-46312

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Zaytech Smart Online Order for Clover plugin = 1.5.4 versions...

PT-2023-29827 · Wpdevart · Wpdevart Contact Form Builder +1

Name of the Vulnerable Software and Affected Versions: wpdevart Contact Form Builder, Contact Widget plugin versions 2.1.6 and earlier Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into the website,...

CVE-2023-45062

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Thomas Scholl canvasio3D Light plugin = 2.4.6 versions...

CVE-2023-41658

Unauth. Reflected Cross-Site Scripting XSS vulnerability in I Thirteen Web Solution Photo Gallery Slideshow & Masonry Tiled Gallery plugin = 1.0.13 versions...

CVE-2023-41662

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Ulf Benjaminsson WP-dTree plugin = 4.4.5 versions...

CVE-2023-41238

Unauth. Reflected Cross-Site Scripting XSS vulnerability in UltimatelySocial Social Media Share Buttons & Social Sharing Icons plugin = 2.8.3 versions...

CVE-2023-40333

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Qode Interactive Bridge Core plugin = 3.0.9 versions...

PT-2023-21755 · Estatik · Estatik Mortgage Calculator Plugin

Name of the Vulnerable Software and Affected Versions: Estatik Estatik Mortgage Calculator plugin versions = 2.0.7 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing...

PT-2023-28134 · Tyche Softwares · Order Delivery Date For Woocommerce

Name of the Vulnerable Software and Affected Versions: Tyche Softwares Order Delivery Date for WooCommerce plugin versions = 3.20.0 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This allows for malicious scripts to be injected into a website,...

CVE-2023-25019

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Premio Chaty plugin = 3.0.9 versions...

CVE-2023-32742

Unauth. Reflected Cross-Site Scripting XSS vulnerability in VeronaLabs WP SMS plugin = 6.1.4 versions...

PT-2023-23615 · WordPress · Wppizza

Name of the Vulnerable Software and Affected Versions: WPPizza – A Restaurant Plugin plugin versions prior to 3.17.1 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into the website,...

CVE-2023-30498

Unauth. Reflected Cross-Site Scripting XSS vulnerability in CodeFlavors Vimeotheque: Vimeo WordPress Plugin = 2.2.1 versions...

CVE-2023-30475

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Elliot Sowersby, RelyWP WooCommerce Affiliate Plugin – Coupon Affiliates plugin = 5.4.5 versions...

CVE-2023-39314

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Teplitsa of social technologies Leyka plugin = 3.30.2 versions...

PT-2023-26401

Name of the Vulnerable Software and Affected Versions Hiroaki Miyashita Custom Field Template plugin versions = 2.5.9 Description The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. Recommendations For versions = 2.5.9, update to a version higher than 2.5.9 to...

PT-2023-26229 · WordPress · Wpkube Authors List

Name of the Vulnerable Software and Affected Versions: WPKube Authors List plugin versions = 2.0.2 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website, potentiall...

PT-2023-25880 · Pimcore · Pimcore Admin Classic Bundle

Name of the Vulnerable Software and Affected Versions: Pimcore Admin Classic Bundle versions prior to 1.0.3 Description: The issue allows for unauthenticated HTML injection or cross-site scripting XSS, affecting admins who have not set up two-factor authentication. This can cause the application ...

CVE-2023-36287

An unauthenticated Cross-Site Scripting XSS vulnerability found in Webkul QloApps 1.6.0 allows an attacker to obtain a user's session cookie and then impersonate that user via POST controller parameter...