WordPress updraftplus plugin cross-site scripting vulnerability (CNVD-2019-30397)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. updraftplus is a WordPress backup, restore, and clone plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

WordPress redirection plugin cross-site scripting vulnerability (CNVD-2019-30388)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. redirection is a redirection management plugin used in it. A cross-site scripting vulnerability exists in the WordPress redirection...

WordPress iThemes Exchange Membership Add-on Cross-Site Scripting Vulnerability

iThemes Exchange for WordPress is a plugin for creating e-commerce websites using the WordPress content management system. membership Add-on is one of the plugins for website membership functionality. A cross-site scripting vulnerability exists in the WordPress iThemes Exchange Membership Add-on...

WordPress icegram plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. icegram is a subscription plugin used in it. A cross-site scripting vulnerability exists in WordPress icegram plugin versions prior to...

Ping Identity Agentless Integration Kit Cross-Site Scripting Vulnerability

Ping Identity Agentless Integration Kit is an agentless authentication development kit from Ping Identity. A cross-site scripting vulnerability exists in Ping Identity Agentless Integration Kit versions prior to 1.5. The vulnerability stems from the lack of proper validation of client-side data b...

WordPress zoho-salesiq plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. zoho-salesiq is one of the plug-ins used to track the behavior of website users. A cross-site scripting vulnerability exists in the...

WordPress wp-plotly plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-plotly is a plugin for embedding interactive Plotly charts in pages. A cross-site scripting vulnerability exists in the WordPress...

WordPress wp-rollback plugin cross-site scripting vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress wp-rollback plugin versions prior to 1.2.3. The vulnerability...

WordPress wp-polls plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-polls is a plugin used to build a voting system in it. A cross-site scripting vulnerability exists in WordPress wp-polls plugin...

WordPress feed-them-social plugin cross-site scripting vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the Facebook Feeds Load More button in versions of the WordPress...

WordPress gd-rating-system plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. gd-rating-system is a rating system plugin used in it. A cross-site scripting vulnerability exists in the log.php file in versions of...

WordPress tubepress plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. tubepress is an open source responsive video library plugin used in it. A cross-site scripting vulnerability exist...

WordPress yikes-inc-easy-mailchimp-extender plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. yikes-inc-easy-mailchimp-extender is used in one of the user registration form to add plug-ins . A cross-site scripting...

WordPress peters-login-redirect plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. peters-login-redirect is a redirection plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

WordPress time-sheets plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. time-sheets is an employee time management plugin used in it. A cross-site scripting vulnerability exists in the WordPress time-sheets...

WordPress mailchimp-for-wp plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. mailchimp-for-wp is a plugin used to send e-mail to subscribers. A cross-site scripting vulnerability exists in the WordPress...

WordPress events-manager plugin cross-site scripting vulnerability (CNVD-2019-30590)

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. events-manager is an events management plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

WordPress ultimate-faqs plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. ultimate-faqs is a FAQ plugin used in it. A cross-site scripting vulnerability exists in the WordPress ultimate-faqs plugin. An attack...

WordPress clean-login plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. clean-login is a front-end login and registration plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

WordPress wassup plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wassup is a plugin for real-time statistical analysis of site visits. A cross-site scripting vulnerability exists in the WordPress...