PT-2026-98386

Name of the Vulnerable Software and Affected Versions Fancy Product Designer versions prior to 6.5.3 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Stored Cross-Site Scripting. This occurs when the elements.title parameter in a shortcode...

CVE-2026-8901: Improper Neutralization of Input During Web Page Generation

The Integration for Freshsales – Contact Form 7, WPForms, Elementor, Gravity Forms and More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Form Submission Data in all versions up to, and including, 1.0.15 due to insufficient input sanitization and output escaping. This make...

EUVD-2021-11263

Malware in sbrugna...

CVE-2021-24350: Improper Neutralization of Input During Web Page Generation

The Visitors WordPress plugin through 0.3 is affected by an Unauthenticated Stored Cross-Site Scripting XSS vulnerability. The plugin would display the user's user agent string without validation or encoding within the WordPress admin panel...

PT-2021-15886

Name of the Vulnerable Software and Affected Versions Visitors WordPress plugin versions 0.3 and earlier Description The issue is related to an Unauthenticated Stored Cross-Site Scripting XSS vulnerability. It occurs because the plugin displays the user's user agent string without proper validati...

Visitors <= 0.3 - Unauthenticated Stored Cross-Site Scripting (XSS)

The plugin is affected by an Unauthenticated Stored Cross-Site Scripting XSS vulnerability. The plugin would display the user's user agent string without validation or encoding within the WordPress admin panel. $ curl -i http://localhost:10008/ --user-agent "alert1" The payload will be executed o...

CVE-2015-5057

Cross-site scripting XSS vulnerability exists in the Wordpress admin panel when the Broken Link Checker plugin before 1.10.9 is installed...

CVE-2015-5057

Cross-site scripting XSS vulnerability exists in the Wordpress admin panel when the Broken Link Checker plugin before 1.10.9 is installed...

PT-2017-6809

Name of the Vulnerable Software and Affected Versions Wordpress Broken Link Checker plugin versions prior to 1.10.9 Description A cross-site scripting XSS issue exists in the Wordpress admin panel. This occurs when the Broken Link Checker plugin is installed. Recommendations For Wordpress Broken...

CVE-2015-5057: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability exists in the Wordpress admin panel when the Broken Link Checker plugin before 1.10.9 is installed...