CVE-2023-46211

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Brainstorm Force Ultimate Addons for WPBakery Page Builder plugin = 3.19.14 versions...

CVE-2023-46211

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Brainstorm Force Ultimate Addons for WPBakery Page Builder plugin = 3.19.14 versions...

CVE-2023-46211 WordPress Ultimate Addons for WPBakery Page Builder Plugin <= 3.19.14 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Brainstorm Force Ultimate Addons for WPBakery Page Builder plugin = 3.19.14 versions...

CVE-2023-46211

CVE-2023-46211 is a stored Cross-Site Scripting (XSS) vulnerability in the Brainstorm Force Ultimate Addons for WPBakery Page Builder plugin, affected versions

CVE-2023-32738

CVE-2023-32738: Stored XSS in WordPress plugin Eonet Manual User Approve (

CVE-2023-46192

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Internet Marketing Ninjas Internal Link Building plugin = 1.2.3 versions...

CVE-2023-46192

CVE-2023-46192 refers to a stored Cross-Site Scripting (XSS) vulnerability in the WordPress plugin “Internet Marketing Ninjas Internal Link Building”, affecting versions 1.2.3 or apply vendor-provided patch when available.

CVE-2023-46091

CVE-2023-46091 concerns the WordPress plugin Category SEO Meta Tags by Bala Krishna / Sergey Yakovlev. The initial document states an Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability affecting the plugin versions &lt;= 2.5 . Publicly available connected details confirm the component...

CVE-2023-32116

CVE-2023-32116 affects the WordPress plugin “TotalPress.Org Custom post types, Custom Fields & more” (versions &lt;= 4.0.12). The root cause is an authenticated stored XSS vulnerability exploitable by users with admin+ privileges; the impact is stored script execution within the plugin’s context ...

CVE-2023-30492

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Vark Minimum Purchase for WooCommerce plugin = 2.0.0.1 versions...

CVE-2023-30492

CVE-2023-30492 concerns a stored Cross-Site Scripting (XSS) in the WordPress plugin Minimum Purchase for WooCommerce (by Vark) for versions

Cross site scripting

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in HappyBox Newsletter & Bulk Email Sender – Email Newsletter Plugin for WordPress plugin = 2.0.1 versions...

Cross site scripting

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Osmansorkar Ajax Archive Calendar plugin = 2.6.7 versions...

Exploit for CVE-2023-38646

CVE-2023-38646 Python script to exploit CVE-2023-38646 Metabas...

CVE-2023-46069

The CVE refers to a Stored Cross-Site Scripting (XSS) vulnerability in the Osmansorkar Ajax Archive Calendar WordPress plugin, affecting versions

CVE-2023-45768 WordPress Next Page Plugin <= 1.5.2 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Stephanie Leary Next Page plugin = 1.5.2 versions...

CVE-2023-45767

CVE-2023-45767 represents a Stored XSS vulnerability in the WordPress plugin Simple Tweet, versioned

CVE-2023-45764

CVE-2023-45764 is a stored XSS vulnerability in the Gopi Ramasamy Scroll post excerpt plugin for WordPress, affecting versions 8.0. No exploitation details are provided in the documents. Monitor for a vendor patch and apply the upgrade when available.

CVE-2023-45758 WordPress Amministrazione Trasparente Plugin <= 8.0.2 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Marco Milesi Amministrazione Trasparente plugin = 8.0.2 versions...

CVE-2023-25032

CVE-2023-25032 applies to the WordPress plugin Print, PDF, Email by PrintFriendly (versions &lt;= 5.5.1). The vulnerability is a Stored XSS that requires admin+ authentication to exploit. Root cause: input handling in the PrintFriendly feature allows injected script to be stored and later rendere...