CVE-2024-37461 WordPress IdeaPush plugin <= 8.65 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Martin Gibson IdeaPush allows Stored XSS.This issue affects IdeaPush: from n/a through 8.65...

CVE-2024-37461 WordPress IdeaPush plugin <= 8.65 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Martin Gibson IdeaPush allows Stored XSS.This issue affects IdeaPush: from n/a through 8.65...

PT-2024-27572 · Ideapush · Ideapush

Name of the Vulnerable Software and Affected Versions: IdeaPush versions through 8.65 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For versions through...

WordPress IdeaPush plugin <= 8.65 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by piro Patchstack Alliance in WordPress Plugin IdeaPush versions = 8.65...

WordPress IdeaPush Plugin <= 8.65 is vulnerable to Cross Site Scripting (XSS)

Software IdeaPush Type Plugin Vulnerable versions = 8.65 Fixed in 8.66 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37461 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 7db453746375 Credits piro Required privilege Unauthenticated...

WordPress IdeaPush plugin <= 8.60 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by piro Patchstack Alliance in WordPress Plugin IdeaPush versions = 8.60...

WordPress IdeaPush Plugin <= 8.60 is vulnerable to Cross Site Scripting (XSS)

Software IdeaPush Type Plugin Vulnerable versions = 8.60 Fixed in 8.61 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37265 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 6d3d6a921f11 Credits piro Required privilege Subscriber...

IdeaPush < 8.58 - Subscriber+ Memory Tab/Routine/Taxonomy Creation

Description The plugin does not have authorisation in various AJAX calls, allowing any authenticated users, such as subscriber to create memory tabs, routines and taxonomies...

WordPress IdeaPush Plugin < 8.58 is vulnerable to Broken Access Control

Software IdeaPush Type Plugin Vulnerable versions 8.58 Fixed in 8.58 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-48774 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 1d6d440b6d76 Credits Abdi Pranata Required privilege Subscrib...

CVE-2023-47181

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Martin Gibson IdeaPush plugin = 8.52 versions...

CVE-2023-47181

A vulnerability in Northern Beaches Websites IdeaPush ideapush.This issue affects IdeaPush: from n/a through = 8.52...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Martin Gibson IdeaPush plugin = 8.52 versions...

CVE-2023-47181

CVE-2023-47181 affects the IdeaPush WordPress plugin (

CVE-2023-47181 WordPress IdeaPush Plugin <= 8.52 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Martin Gibson IdeaPush plugin = 8.52 versions...

IdeaPush < 8.53 - Admin+ Stored XSS

Description The plugin does not validate and escape some parameters, which could allow users with the admin role and above to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

WordPress Plugin IdeaPush Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

WordPress IdeaPush Plugin <= 8.52 is vulnerable to Cross Site Scripting (XSS)

Software IdeaPush Type Plugin Vulnerable versions = 8.52 Fixed in 8.53 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47181 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID b54fa25b769b Credits Emili Castells Required privileg...