9 matches found
EUVD-2026-55021
The Advanced Excerpt WordPress plugin before 4.5 does not sanitise and escape one of its settings before outputting it on the front end of the site, which could allow administrators including those without the unfilteredhtml capability, such as on multisite to perform Stored Cross-Site Scripting...
CVE-2026-13701
The Advanced Excerpt WordPress plugin before 4.5 does not sanitise and escape one of its settings before outputting it on the front end of the site, which could allow administrators including those without the unfilteredhtml capability, such as on multisite to perform Stored Cross-Site Scripting...
CVE-2023-46776
Cross-Site Request Forgery CSRF vulnerability in Serena Villa Auto Excerpt everywhere plugin = 1.5 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Serena Villa Auto Excerpt everywhere plugin = 1.5 versions...
PT-2023-30205 · WordPress · Serena Villa Auto Excerpt Everywhere Plugin
Name of the Vulnerable Software and Affected Versions: Serena Villa Auto Excerpt everywhere plugin versions = 1.5 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions ...
CVE-2023-45764
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Gopi Ramasamy Scroll post excerpt plugin = 8.0 versions...
CVE-2023-45764
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Gopi Ramasamy Scroll post excerpt plugin = 8.0 versions...
CVE-2023-45764 WordPress Scroll post excerpt Plugin <= 8.0 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Gopi Ramasamy Scroll post excerpt plugin = 8.0 versions...
CVE-2023-45764
CVE-2023-45764 is a stored XSS vulnerability in the Gopi Ramasamy Scroll post excerpt plugin for WordPress, affecting versions 8.0. No exploitation details are provided in the documents. Monitor for a vendor patch and apply the upgrade when available.