WordPress AZIndex plugin <= 0.8.1 - Stored XSS via CSRF vulnerability

Stored XSS via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin AZIndex versions = 0.8.1...

WordPress Flaming Forms plugin <= 1.0.1 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Bob Matyas in WordPress Plugin Flaming Forms versions = 1.0.1...

WordPress Flaming Forms plugin <= 1.0.1 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin Flaming Forms versions = 1.0.1...

WordPress DN Popup plugin <= 1.2.2 - Settings Update via CSRF vulnerability

Settings Update via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin DN Popup versions = 1.2.2...

WordPress Viral Signup plugin <= 2.1 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin Viral Signup versions = 2.1...

WordPress Music Request Manager plugin <= 1.3 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Bob Matyas in WordPress Plugin Music Request Manager versions = 1.3...

WordPress Misiek Photo Album plugin <= 1.4.3 - Album Deletion via CSRF vulnerability

Album Deletion via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin Misiek Photo Album versions = 1.4.3...

WordPress Music Request Manager plugin <= 1.3 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin Music Request Manager versions = 1.3...

WordPress Snapshot Backup plugin <= 2.1.1 - Stored XSS via CSRF vulnerability

Stored XSS via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin Snapshot Backup versions = 2.1.1...

WordPress WP MultiTasking plugin <= 0.1.12 - Reflected XSS via Shortcode vulnerability

Reflected XSS via Shortcode vulnerability discovered by Bob Matyas in WordPress Plugin WP MultiTasking versions = 0.1.12...

WordPress DL Robots.txt plugin <= 1.2 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin DL Robots.txt versions = 1.2...

WordPress TrueBooker plugin <= 1.0.2 - Settings Update via CSRF vulnerability

Settings Update via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin TrueBooker versions = 1.0.2...

WordPress WP eStore plugin < 8.5.6 - Settings Reset via CSRF vulnerability

Settings Reset via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin WP eStore versions 8.5.6...

WordPress WP eStore plugin < 8.5.6 - Reflected XSS in Customer Search vulnerability

Reflected XSS in Customer Search vulnerability discovered by Bob Matyas in WordPress Plugin WP eStore versions 8.5.6...

WordPress WP eStore Plugin < 8.5.6 is vulnerable to Cross Site Scripting (XSS)

Software WP eStore Type Plugin Vulnerable versions 8.5.6 Fixed in 8.5.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-6133 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 0478cdd4af65 Credits Bob Matyas Required...

WordPress House Manager plugin <= 1.0.8.4 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Bob Matyas in WordPress Plugin House Manager versions = 1.0.8.4...

WordPress Community Events plugin < 1.5.1 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin Community Events versions 1.5.1...

WordPress WooCommerce Customers Manager plugin < 30.1 - Multiple CSRF vulnerability

Multiple CSRF vulnerability discovered by Bob Matyas in WordPress Plugin WooCommerce Customers Manager versions 30.1...

WordPress HTML Forms plugin < 1.3.34 - Bulk Delete via CSRF vulnerability

Bulk Delete via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin HTML Forms versions 1.3.34...

WordPress SpiderContacts plugin <= 1.1.7 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Bob Matyas in WordPress Plugin SpiderContacts versions = 1.1.7...