CVE-2024-37461

CVE-2024-37461 is an unauthenticated Stored XSS in the IdeaPush WordPress plugin (versions up to 8.65) caused by improper input neutralization during web page generation. The vulnerability affects IdeaPush (WordPress plugin) and is listed as patched; remediation is to upgrade to a version with th...

CVE-2024-37461 WordPress IdeaPush plugin <= 8.65 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Martin Gibson IdeaPush allows Stored XSS.This issue affects IdeaPush: from n/a through 8.65...

PT-2024-27572 · Ideapush · Ideapush

Name of the Vulnerable Software and Affected Versions: IdeaPush versions through 8.65 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For versions through...

WordPress IdeaPush plugin <= 8.65 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by piro Patchstack Alliance in WordPress Plugin IdeaPush versions = 8.65...

WordPress IdeaPush Plugin <= 8.65 is vulnerable to Cross Site Scripting (XSS)

Software IdeaPush Type Plugin Vulnerable versions = 8.65 Fixed in 8.66 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37461 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 7db453746375 Credits piro Required privilege Unauthenticated...

WordPress IdeaPush plugin <= 8.60 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by piro Patchstack Alliance in WordPress Plugin IdeaPush versions = 8.60...

WordPress IdeaPush Plugin <= 8.60 is vulnerable to Cross Site Scripting (XSS)

Software IdeaPush Type Plugin Vulnerable versions = 8.60 Fixed in 8.61 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37265 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 6d3d6a921f11 Credits piro Required privilege Subscriber...

IdeaPush < 8.58 - Subscriber+ Memory Tab/Routine/Taxonomy Creation

Description The plugin does not have authorisation in various AJAX calls, allowing any authenticated users, such as subscriber to create memory tabs, routines and taxonomies...

WordPress IdeaPush Plugin < 8.58 is vulnerable to Broken Access Control

Software IdeaPush Type Plugin Vulnerable versions 8.58 Fixed in 8.58 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-48774 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 1d6d440b6d76 Credits Abdi Pranata Required privilege Subscrib...

CVE-2023-47181

A vulnerability in Northern Beaches Websites IdeaPush ideapush.This issue affects IdeaPush: from n/a through = 8.52...

CVE-2023-47181

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Martin Gibson IdeaPush plugin = 8.52 versions...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Martin Gibson IdeaPush plugin = 8.52 versions...

CVE-2023-47181

CVE-2023-47181 affects the IdeaPush WordPress plugin (

CVE-2023-47181 WordPress IdeaPush Plugin <= 8.52 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Martin Gibson IdeaPush plugin = 8.52 versions...

WordPress Plugin IdeaPush Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

IdeaPush < 8.53 - Admin+ Stored XSS

Description The plugin does not validate and escape some parameters, which could allow users with the admin role and above to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

WordPress IdeaPush Plugin <= 8.52 is vulnerable to Cross Site Scripting (XSS)

Software IdeaPush Type Plugin Vulnerable versions = 8.52 Fixed in 8.53 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47181 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID b54fa25b769b Credits Emili Castells Required privileg...