PT-2025-12736

Name of the Vulnerable Software and Affected Versions DesignThemes Core Features plugin for WordPress versions up to, and including, 4.8 Description The issue is related to Stored Cross-Site Scripting via shortcodes due to insufficient input sanitization and output escaping on user-supplied...

PT-2025-1621

Name of the Vulnerable Software and Affected Versions Eventer plugin for WordPress versions up to, and including, 3.9.9 Description The issue is related to Stored Cross-Site Scripting via shortcodes due to insufficient input sanitization and output escaping on user-supplied attributes. This allow...

PT-2024-13845

Name of the Vulnerable Software and Affected Versions Horizontal scrolling announcements plugin for WordPress versions up to, and including, 2.4 Description The issue arises from insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the existing SQL query in t...

PT-2024-19625

Name of the Vulnerable Software and Affected Versions Contact Form Manager plugin for WordPress versions up to, and including, 1.6.1 Description The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the plugin's xyz-cfm-form shortcode, allowing...

PT-2024-18981

Name of the Vulnerable Software and Affected Versions Ninja Beaver Add-ons for Beaver Builder plugin for WordPress versions up to, and including, 2.4.5 Description The issue is related to Stored Cross-Site Scripting via the plugin's widgets due to insufficient input sanitization and output escapi...

PT-2024-15111

Name of the Vulnerable Software and Affected Versions Breakdance plugin for WordPress versions up to, and including, 1.7.0 Description The issue is related to Stored Cross-Site Scripting via the plugin's custom postmeta output due to insufficient input sanitization and output escaping on...

PT-2024-18842

Name of the Vulnerable Software and Affected Versions Elementor Website Builder Pro versions up to, and including, 3.20.1 Description The issue is related to Stored Cross-Site Scripting via the Media Carousel widget due to insufficient input sanitization and output escaping on user-supplied...

PT-2024-19482

Name of the Vulnerable Software and Affected Versions The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress versions up to, and including, 4.5.2 Description The issue is related to Stored Cross-Site Scripting via the plugin's widgets due to insufficient...

PT-2024-18645

Name of the Vulnerable Software and Affected Versions Video Conferencing with Zoom plugin for WordPress versions up to, and including, 4.4.4 Description The issue is related to Stored Cross-Site Scripting in the 'zoom recordings by meeting' shortcode due to insufficient input sanitization and...

PT-2024-15824

Name of the Vulnerable Software and Affected Versions WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress versions up to, and including, 7.0.1 Description The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping on RSS feed content...

PT-2024-17748

Name of the Vulnerable Software and Affected Versions The Email Encoder – Protect Email Addresses and Phone Numbers plugin for WordPress versions up to, and including, 2.2.0 Description The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping ...

PT-2024-16362

Name of the Vulnerable Software and Affected Versions PowerPack Addons for Elementor plugin for WordPress versions up to, and including, 2.7.14 Description The issue is related to Stored Cross-Site Scripting via the plugin's buttons due to insufficient input sanitization and output escaping on...

PT-2024-15081

Name of the Vulnerable Software and Affected Versions The Orbit Fox by ThemeIsle plugin for WordPress versions up to, and including, 2.10.26 Description The issue is related to Stored Cross-Site Scripting via the plugin's custom fields due to insufficient input sanitization and output escaping on...

PT-2024-13769

Name of the Vulnerable Software and Affected Versions Video PopUp plugin for WordPress versions up to, and including, 1.1.3 Description The issue is related to Stored Cross-Site Scripting via the video popup shortcode due to insufficient input sanitization and output escaping on user-supplied...

PT-2024-15163

Name of the Vulnerable Software and Affected Versions Weaver Xtreme theme for WordPress versions up to, and including, 6.3.0 Description The issue is related to Stored Cross-Site Scripting via custom post meta due to insufficient input sanitization and output escaping on user-supplied meta,...

PT-2023-30587

Name of the Vulnerable Software and Affected Versions Advanced iFrame plugin for WordPress versions up to, and including, 2023.8 Description The issue is related to Stored Cross-Site Scripting via the 'advanced iframe' shortcode due to insufficient input sanitization and output escaping on...

PT-2023-32280

Name of the Vulnerable Software and Affected Versions SEO Slider plugin for WordPress versions up to, and including, 1.1.0 Description The issue is related to Stored Cross-Site Scripting via the plugin's 'slider' shortcode and post meta due to insufficient input sanitization and output escaping o...

PT-2023-31960

Name of the Vulnerable Software and Affected Versions Magic Action Box plugin for WordPress versions up to, and including, 2.17.2 Description The issue is related to Stored Cross-Site Scripting via shortcodes due to insufficient input sanitization and output escaping on user-supplied attributes...

PT-2023-31760

Name of the Vulnerable Software and Affected Versions WP Mailto Links – Protect Email Addresses plugin for WordPress versions up to, and including, 3.1.3 Description The issue is related to Stored Cross-Site Scripting via the wpml mailto shortcode due to insufficient input sanitization and output...

PT-2023-31907

Name of the Vulnerable Software and Affected Versions flowpaper plugin for WordPress versions up to, and including, 2.0.3 Description The issue is related to Stored Cross-Site Scripting via the flipbook shortcode due to insufficient input sanitization and output escaping on user-supplied...