PT-2023-22043 · Unknown · Wpmobile.App

Name of the Vulnerable Software and Affected Versions: WPMobile.App versions prior to 11.20 Description: A Stored Cross-Site Scripting XSS vulnerability exists, allowing authentication bypass for admin+ users. Recommendations: For versions prior to 11.20, update to a version that contains a fix f...

CVE-2023-23883

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in David Gwyer WP Content Filter plugin = 3.0.1 versions...

PT-2023-20072 · Cms Press · Cms Press

Name of the Vulnerable Software and Affected Versions: CMS Press plugin versions 0.2.3 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. There is no information provided about the estimated number ...

CVE-2022-47434

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in PB SEO Friendly Images plugin = 4.0.5 versions...

CVE-2023-23785

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in DgCult Exquisite PayPal Donation plugin = v2.0.0 versions...

CVE-2023-25792

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in XiaoMac WP Open Social plugin = 5.0 versions...

CVE-2023-25789

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Tapfiliate plugin = 3.0.12 versions...

CVE-2023-25786

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Thom Stark Eyes Only: User Access Shortcode plugin = 1.8.2 versions...

PT-2023-19222 · Unknown · Sergey Panasenko Sponsors Carousel

Name of the Vulnerable Software and Affected Versions: Sergey Panasenko Sponsors Carousel plugin versions prior to 4.02 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin or higher privileges. Recommendations: For versions...

CVE-2023-23723

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Winwar Media WP Email Capture plugin = 3.9.3 versions...

CVE-2023-25461

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in namithjawahar Wp-Insert plugin = 2.5.0 versions...

CVE-2023-25485

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Bernhard Kux JSON Content Importer plugin = 1.3.15 versions...

CVE-2023-25490

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Eric Teubert Archivist – Custom Archive Templates plugin = 1.7.4 versions...

PT-2023-20104 · WordPress · Bernhard Kux Json Content Importer

Name of the Vulnerable Software and Affected Versions: Bernhard Kux JSON Content Importer plugin versions prior to 1.3.16 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin or higher privileges. Recommendations: For version...

CVE-2023-23816

Auth. admin+ Cross-Site Scripting XSS vulnerability in Twardes Sitemap Index plugin = 1.2.3 versions...

CVE-2022-47435

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Olive Design WP-OliveCart plugin = 1.1.3 versions...

CVE-2022-43480

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Magneticlab Sàrl Homepage Pop-up plugin = 1.2.5 versions...

CVE-2022-44625

The CVE CVE-2022-44625 affects the WordPress plugin Zephilou Cyklodev WP Notify (versions

CVE-2023-29170

Auth. admin+ Stored Cross-site Scripting XSS vulnerability in PI Websolution Product Enquiry for WooCommerce, WooCommerce product catalog plugin = 2.2.12 versions...

CVE-2023-23799

Auth. admin+ Stored Cross-site Scripting XSS vulnerability in Leonardo Giacone Easy Panorama plugin = 1.1.4 versions...