Design/Logic Flaw

Stripe Add-on for iThemes Exchange before 1.2.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9364

2Checkout Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9363

iThemes Exchange before 1.12.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9365

Authorize.net Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9367

Easy Canadian Sales Taxes Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

Design/Logic Flaw

Custom URL Tracking Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

Design/Logic Flaw

2Checkout Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

Design/Logic Flaw

Easy Canadian Sales Taxes Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

Design/Logic Flaw

Authorize.net Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

Design/Logic Flaw

iThemes Exchange before 1.12.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9379

The CVE-2015-9379 entry concerns WordPress plugin WordPress iThemes Builder Style Manager. Affected component: the Style Manager widget/plugin (iThemes Builder Style Manager) for WordPress, with vulnerable versions before 0.7.7. Root cause: cross-site scripting (XSS) vulnerability via the add_que...

CVE-2015-9379

iThemes Builder Style Manager before 0.7.7 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9378

iThemes Builder Theme Market before 5.1.27 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9378

The CVE-2015-9378 entry concerns iThemes Builder Theme Market for WordPress, where a cross-site scripting (XSS) vulnerability exists in the add_query_arg() and remove_query_arg() paths. Affected product/version: iThemes Builder Theme Market prior to 5.1.27. Root cause: insufficient input handling...

CVE-2015-9377

Vulnerability: iThemes Builder Theme Depot for WordPress is affected by an XSS flaw in add_query_arg() and remove_query_arg(). Version range affected is prior to 5.0.30. Root cause details are not elaborated beyond the XSS via query argument handling. Impact is described as cross-site scripting, ...

CVE-2015-9377

iThemes Builder Theme Depot before 5.0.30 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9376

iThemes Mobile before 1.2.8 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9376

The CVE-2015-9376 entry concerns iThemes Mobile for WordPress (before 1.2.8). The underlying issue is an XSS in add_query_arg() and remove_query_arg() that can be triggered through the affected plugin. Impact is XSS (as stated in multiple sources); exploitation details are not provided in the doc...

CVE-2015-9375

Table Rate Shipping Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9375

CVE-2015-9375 affects the Table Rate Shipping Add-on for WordPress/iThemes Exchange (before 1.1.0). The vulnerability is an XSS via add_query_arg() and remove_query_arg(), with partial integrity impact (NVD CVSS2: I:P; CVSS3: I:L/C:L). Mitigations/patch: upgrade to version 1.1.0 or later (per sou...