PT-2023-15413 · WordPress · Gigpress

Name of the Vulnerable Software and Affected Versions: GigPress WordPress plugin versions prior to 2.3.28 Description: The issue concerns the GigPress WordPress plugin, which does not properly validate and escape certain shortcode attributes before outputting them in a page or post. This could...

PT-2022-23628 · WordPress · Awesome Ug Torro Forms

Name of the Vulnerable Software and Affected Versions: Awesome UG Torro Forms plugin versions 1.0.16 and earlier Description: The issue is an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with contributor or higher privileges can inject malicious scripts...