6457 matches found
Cross site scripting
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Greg Ross Schedule Posts Calendar plugin = 5.2 versions...
CVE-2023-40206
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in hwk-fr WP 404 Auto Redirect to Similar Post plugin = 1.0.3 versions...
CVE-2023-39919
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in maennchen1.De wpShopGermany – Protected Shops plugin = 2.0 versions...
CVE-2023-37393
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Atarim Visual Website Collaboration, Feedback & Project Management – Atarim plugin = 3.9.3 versions...
CVE-2023-25465
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Gopi Ramasamy wp tell a friend popup form plugin = 7.1 versions...
PT-2023-20083 · Gopi Ramasamy · Wp Tell A Friend Popup Form Plugin
Name of the Vulnerable Software and Affected Versions: Gopi Ramasamy wp tell a friend popup form plugin versions = 7.1 Description: The issue is related to an Authenticated admin+ Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with administrative access can inject...
CVE-2023-38517
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Realwebcare WRC Pricing Tables plugin = 2.3.7 versions...
CVE-2023-38476
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in SuiteDash :: ONE Dashboard® Client Portal : SuiteDash Direct Login plugin = 1.7.6 versions...
CVE-2023-38482
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in QualityUnit Post Affiliate Pro plugin = 1.25.0 versions...
CVE-2023-38387
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Elastic Email Sender plugin = 1.2.6 versions...
PT-2023-26464 · Qualityunit · Post Affiliate Pro
Name of the Vulnerable Software and Affected Versions: QualityUnit Post Affiliate Pro plugin versions = 1.25.0 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into the...
CVE-2023-34011
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in ShopConstruct plugin = 1.1.2 versions...
Cross site scripting
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in miniOrange YourMembership Single Sign On – YM SSO Login plugin = 1.1.3 versions...
CVE-2023-25042
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Liam Gladdy Storm Consultancy oAuth Twitter Feed for Developers plugin = 2.3.0 versions...
CVE-2023-25488
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Duc Bui Quang WP Default Feature Image plugin = 1.0.1.1 versions...
Cross site scripting
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Liam Gladdy Storm Consultancy oAuth Twitter Feed for Developers plugin = 2.3.0 versions...
CVE-2023-3404
The ProfileGrid plugin for WordPress is vulnerable to unauthorized decryption of private information in versions up to, and including, 5.5.0. This is due to the passphrase and iv being hardcoded in the 'pmencryptdecryptpass' function and used across all sites running the plugin. This makes it...
CVE-2023-35092
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Abhay Yadav Breadcrumb simple plugin = 1.3 versions...