WordPress Number Chat Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software Number Chat Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 8cd1dd5221d3 Credits Rafie Muhammad Patchstack Required...

WordPress Alley Business Toolkit Plugin <= 2.0.7 is vulnerable to Cross Site Scripting (XSS)

Software Alley Business Toolkit Type Plugin Vulnerable versions = 2.0.7 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID f03c4c803b7a Credits Rafie Muhammad Patchstack...

WordPress Login Designer Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)

Software Login Designer Type Plugin Vulnerable versions = 1.6.1 Fixed in 1.6.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 91d36b63e0ed Credits Rafie Muhammad Patchstack Require...

WordPress Cloud SAML SSO - Single Sign On Login Plugin < 1.0.14 is vulnerable to Cross Site Scripting (XSS)

Software Cloud SAML SSO - Single Sign On Login Type Plugin Vulnerable versions 1.0.14 Fixed in 1.0.14 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 69c4df44a084 Credits Rafie...

WordPress Cryptocurrency Portfolio Tracker Plugin <= 0.0.17 is vulnerable to Cross Site Scripting (XSS)

Software Cryptocurrency Portfolio Tracker Type Plugin Vulnerable versions = 0.0.17 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 21f6f43dfd2a Credits Rafie Muhammad...

WordPress StreamWeasels Twitch Integration Plugin <= 1.6.7 is vulnerable to Cross Site Scripting (XSS)

Software StreamWeasels Twitch Integration Type Plugin Vulnerable versions = 1.6.7 Fixed in 1.6.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 71e06e3c812c Credits Rafie Muhammad...

WordPress Forms to Sendinblue Plugin <= 5.2.2 is vulnerable to Cross Site Scripting (XSS)

Software Forms to Sendinblue Type Plugin Vulnerable versions = 5.2.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 455e2c223c64 Credits Rafie Muhammad Patchstack...

WordPress BlogHub Theme <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)

Software BlogHub Type Theme Vulnerable versions = 1.0.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c7790fb6b24d Credits Rafie Muhammad Patchstack Required privileg...

WordPress HQTheme Extra Plugin <= 1.0.19 is vulnerable to Cross Site Scripting (XSS)

Software HQTheme Extra Type Plugin Vulnerable versions = 1.0.19 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID bf9979eb70a5 Credits Rafie Muhammad Patchstack Required...

WordPress Turbo Widgets Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Turbo Widgets Type Plugin Vulnerable versions = 2.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 87b08b4531c7 Credits Rafie Muhammad Patchstack Required...

WordPress Download Magnet Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)

Software Download Magnet Type Plugin Vulnerable versions = 1.2.0 Fixed in 1.2.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID d6d76c2b29df Credits Rafie Muhammad Patchstack Requir...

WordPress Unakit Theme <= 1.2.4.2 is vulnerable to Cross Site Scripting (XSS)

Software Unakit Type Theme Vulnerable versions = 1.2.4.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b16b88fbd2b0 Credits Rafie Muhammad Patchstack Required privile...

WordPress Modern Designs for Gravity Forms Plugin <= 1.1.3 is vulnerable to Cross Site Scripting (XSS)

Software Modern Designs for Gravity Forms Type Plugin Vulnerable versions = 1.1.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4662a347c105 Credits Rafie Muhammad...

WordPress Live Scores for SportsPress Plugin <= 1.9.2 is vulnerable to Cross Site Scripting (XSS)

Software Live Scores for SportsPress Type Plugin Vulnerable versions = 1.9.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 1a8a87c6e703 Credits Rafie Muhammad...

WordPress Nokke Theme < 1.2.4 is vulnerable to Cross Site Scripting (XSS)

Software Nokke Type Theme Vulnerable versions 1.2.4 Fixed in 1.2.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 801453b53dfc Credits Rafie Muhammad Patchstack Required privilege...

WordPress Bulk Edit Events – Create Events in a Bulk Editor Plugin < 1.1.22 is vulnerable to Cross Site Scripting (XSS)

Software Bulk Edit Events – Create Events in a Bulk Editor Type Plugin Vulnerable versions 1.1.22 Fixed in 1.1.22 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 83f3913c0c99 Credit...

WordPress Booking Weir Plugin <= 1.0.11 is vulnerable to Cross Site Scripting (XSS)

Software Booking Weir Type Plugin Vulnerable versions = 1.0.11 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2f04da911473 Credits Rafie Muhammad Patchstack Required...

WordPress Cozy Blocks Plugin <= 1.2.3 is vulnerable to Cross Site Scripting (XSS)

Software Cozy Blocks Type Plugin Vulnerable versions = 1.2.3 Fixed in 1.2.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer CozyThemes PSID 5480a1de59c0 Credits Rafie Muhammad Patchstack Required...

WordPress 5 Stars Rating Funnel Plugin <= 1.2.63 is vulnerable to Cross Site Scripting (XSS)

Software 5 Stars Rating Funnel Type Plugin Vulnerable versions = 1.2.63 Fixed in 1.2.64 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Tobias PSID b28e41895b77 Credits Rafie Muhammad Patchstack Require...

WordPress Easy Newsletter Signups Plugin <= 1.0.4 is vulnerable to Cross Site Scripting (XSS)

Software Easy Newsletter Signups Type Plugin Vulnerable versions = 1.0.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID a29cfa1e302e Credits Rafie Muhammad Patchstack...