PT-2025-4558 · Unknown · Grandslambert Featured Page Widget

The vulnerable software is grandslambert Featured Page Widget, with versions affected ranging from n/a to 2.2. The vulnerability is an improper neutralization of input during web page generation, also known as Cross-site Scripting XSS, which allows for Reflected XSS attacks. This vulnerability is...

CVE-2025-22569: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GrandSlambert Featured Page Widget featured-page-widget allows Reflected XSS.This issue affects Featured Page Widget: from n/a through = 2.2...

WordPress plugin, Featured Page Widget, Cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

WordPress Featured Page Widget Plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Featured Page Widget versions = 2.2...

CVE-2023-30488

Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Featured Post Creative allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Featured Post Creative: from n/a through 1.2.7...

CVE-2023-30488

Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Featured Post Creative featured-post-creative allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Featured Post Creative: from n/a through = 1.2.7...

CVE-2023-30488 WordPress Featured Post Creative plugin <= 1.2.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Featured Post Creative featured-post-creative allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Featured Post Creative: from n/a through = 1.2.7...

CVE-2023-30488

CVE-2023-30488 describes a Missing Authorization (Broken Access Control) vulnerability in the WordPress plugin Featured Post Creative (

CVE-2023-30488 WordPress Featured Post Creative plugin <= 1.2.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Featured Post Creative allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Featured Post Creative: from n/a through 1.2.7...

WordPress Plugin: Featured Post Creative – Security Vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

CVE-2023-30488: Missing Authorization

Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Featured Post Creative allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Featured Post Creative: from n/a through 1.2.7...

PT-2024-12240 · Unknown · Featured Post Creative +1

Name of the Vulnerable Software and Affected Versions: Featured Post Creative versions 1.2.7 and earlier Description: The issue is related to a Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Featured Post Creative, which allows exploiting incorrectly configured access...

CVE-2024-51911

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ketan Patel Featured product by category name featured-product-by-category-name allows DOM-Based XSS.This issue affects Featured product by category name: from n/a through = 1.1...

CVE-2024-51650

Cross-Site Request Forgery CSRF vulnerability in scottmydollarplancom Random Featured Post random-featured-post-plugin allows Stored XSS.This issue affects Random Featured Post: from n/a through = 1.1.3...

CVE-2024-51650 WordPress Random Featured Post plugin <= 1.1.3 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in scottmydollarplancom Random Featured Post random-featured-post-plugin allows Stored XSS.This issue affects Random Featured Post: from n/a through = 1.1.3...

CVE-2024-51650

CVE-2024-51650 describes a CSRF-induced Stored XSS in the WordPress plugin Random Featured Post (versions

CVE-2024-51911

CVE-2024-51911 is a DOM-based Cross-Site Scripting vulnerability in the WordPress plugin “Featured product by category name” (author: Ketan Patel) affecting version up to 1.1. The vulnerability arises from improper input neutralization during web page generation, enabling DOM-based XSS. The CVE e...

CVE-2024-51911: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ketan Patel Featured product by category name featured-product-by-category-name allows DOM-Based XSS.This issue affects Featured product by category name: from n/a through = 1.1...

WordPress plugin Random Featured Post has a vulnerability related to cross-site request forgeing attacks.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

PT-2024-35044

Name of the Vulnerable Software and Affected Versions Ketan Patel Featured product by category name versions n/a through 1.1 Description The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This means that an attacker could potential...