Lucene search
K

12 matches found

Cvelist
Cvelist
added 2025/01/23 3:29 p.m.14 views

CVE-2025-23545 WordPress WP Social Broadcast plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Navnish Bhardwaj WP Social Broadcast wp-social-broadcast allows Reflected XSS.This issue affects WP Social Broadcast: from n/a through = 1.0.0...

7.1CVSS0.00178EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/01/16 6:41 p.m.2 views

WordPress WP Social Broadcast plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin WP Social Broadcast versions = 1.0.0...

7.1CVSS6.1AI score0.00178EPSS
Exploits0Affected Software1
NVD
NVD
added 2024/12/06 5:15 a.m.14 views

CVE-2024-11379

The Broadcast plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'docheck' parameter in all versions up to, and including, 51.01 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scrip...

6.1CVSS0.02577EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/12/06 4:24 a.m.5 views

CVE-2024-11379 Broadcast <= 51.01 - Reflected Cross-Site Scripting

The Broadcast plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'docheck' parameter in all versions up to, and including, 51.01 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scrip...

6.1CVSS6.4AI score0.02577EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/12/06 4:24 a.m.11 views

CVE-2024-11379 Broadcast <= 51.01 - Reflected Cross-Site Scripting

The Broadcast plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'docheck' parameter in all versions up to, and including, 51.01 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scrip...

6.1CVSS0.02577EPSS
Exploits0References3
CVE
CVE
added 2024/12/06 4:24 a.m.45 views

CVE-2024-11379

CVE-2024-11379 affects WordPress Broadcast (ThreeWP Broadcast) up to version 51.01, with a Reflected Cross-Site Scripting in the do_check parameter. The vulnerability is exploitable by unauthenticated attackers and only affects multi-site installations; root cause is insufficient input sanitizati...

6.1CVSS6AI score0.02577EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/12/06 12:0 a.m.2 views

PT-2024-16945 · WordPress · Broadcast

Name of the Vulnerable Software and Affected Versions: Broadcast plugin for WordPress versions up to, and including, 51.01 Description: The issue is related to Reflected Cross-Site Scripting via the do check parameter due to insufficient input sanitization and output escaping. This allows...

6.1CVSS6.7AI score0.02577EPSS
Exploits0References8
CNNVD
CNNVD
added 2024/12/06 12:0 a.m.1 views

WordPress plugin Broadcast 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.1CVSS7.7AI score0.02577EPSS
Exploits0References3
Patchstack
Patchstack
added 2024/12/05 10:19 p.m.2 views

WordPress Broadcast plugin <= 51.01 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Broadcast versions = 51.01...

6.1CVSS6.3AI score0.02577EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2018/10/03 12:0 a.m.26 views

WordPress Wechat Broadcast plugin <= 1.2.0 - Local/Remote File Inclusion vulnerability

Local/Remote File Inclusion vulnerability found by Manuel Garcia Cardenas in WordPress Wechat Broadcast plugin versions = 1.2.0. Solution 2018 October 3rd - no patched version available to download. We recommend to deactivate and uninstall...

9.8CVSS3.8AI score0.77298EPSS
Exploits4References1Affected Software1
Prion
Prion
added 2018/09/24 10:29 p.m.19 views

Directory traversal

The Wechat Broadcast plugin 1.2.0 and earlier for WordPress allows Directory Traversal via the Image.php url parameter...

7.5CVSS9.4AI score0.77298EPSS
Exploits4References5Affected Software1
OSV
OSV
added 2018/09/24 10:29 p.m.24 views

CVE-2018-16283

The Wechat Broadcast plugin 1.2.0 and earlier for WordPress allows Directory Traversal via the Image.php url parameter...

9.8CVSS6.8AI score
Exploits0References5
Rows per page
Query Builder