WordPress Custom Welcome Guide Plugin <= 1.0.8 is vulnerable to Cross Site Scripting (XSS)

Software Custom Welcome Guide Type Plugin Vulnerable versions = 1.0.8 Fixed in 1.0.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 0f8aead91a99 Credits Rafie Muhammad Patchstack...

WordPress Custom Welcome Guide plugin < 1.0.6 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Custom Welcome Guide plugin versions 1.0.6. Solution Update the WordPress Custom Welcome Guide plugin to the latest available version at least 1.0.6...

WordPress Custom Welcome Guide plugin < 1.0.6 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Custom Welcome Guide plugin versions 1.0.6. Solution Update the WordPress Custom Welcome Guide plugin to the latest available version at least 1.0.6...