WordPress Gutenberg Blocks – ACF Blocks Suite Plugin < 2.6.10 is vulnerable to Cross Site Scripting (XSS)

Software Gutenberg Blocks – ACF Blocks Suite Type Plugin Vulnerable versions 2.6.10 Fixed in 2.6.10 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID e64ba14a6800 Credits Rafie Muhamm...

WordPress FooGallery Plugin < 2.2.44 is vulnerable to Cross Site Scripting (XSS)

Software FooGallery Type Plugin Vulnerable versions 2.2.44 Fixed in 2.2.44 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 8f1d9323b03f Credits Rafie Muhammad Patchstack Required...

WordPress Finpose – Accounting for WooCommerce Plugin <= 4.5.2 is vulnerable to Cross Site Scripting (XSS)

Software Finpose – Accounting for WooCommerce Type Plugin Vulnerable versions = 4.5.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 9ca8d081e629 Credits Rafie Muhamma...

WordPress Meridia Theme < 2.2.8 is vulnerable to Cross Site Scripting (XSS)

Software Meridia Type Theme Vulnerable versions 2.2.8 Fixed in 2.2.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b8660ded8ee4 Credits Rafie Muhammad Patchstack Required privileg...

WordPress Variation Swatches for WooCommerce Stores Plugin < 1.0.4 is vulnerable to Cross Site Scripting (XSS)

Software Variation Swatches for WooCommerce Stores Type Plugin Vulnerable versions 1.0.4 Fixed in 1.0.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 46ea8c04862a Credits Rafie...

WordPress WooCommerce Bulk Edit Products – WP Sheet Editor Plugin < 1.8.4 is vulnerable to Cross Site Scripting (XSS)

Software WooCommerce Bulk Edit Products – WP Sheet Editor Type Plugin Vulnerable versions 1.8.4 Fixed in 1.8.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2560a59a4728 Credits...

WordPress Sales Page Addon – Elementor & Beaver Builder Plugin < 1.4.1 is vulnerable to Cross Site Scripting (XSS)

Software Sales Page Addon – Elementor & Beaver Builder Type Plugin Vulnerable versions 1.4.1 Fixed in 1.4.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID f3400abfe05c Credits Rafi...

WordPress Top Bar – PopUps – by WPOptin Plugin <= 1.2.6 is vulnerable to Cross Site Scripting (XSS)

Software Top Bar – PopUps – by WPOptin Type Plugin Vulnerable versions = 1.2.6 Fixed in 1.2.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID cc20ab59ac51 Credits Rafie Muhammad...

WordPress WP Sierra Theme <= 1.0.49 is vulnerable to Cross Site Scripting (XSS)

Software WP Sierra Type Theme Vulnerable versions = 1.0.49 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 34a487172e97 Credits Rafie Muhammad Patchstack Required...

WordPress Rovenstart Theme <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)

Software Rovenstart Type Theme Vulnerable versions = 1.2.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID cca9830069a7 Credits Rafie Muhammad Patchstack Required...

WordPress Topcat Lite Theme <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)

Software Topcat Lite Type Theme Vulnerable versions = 2.0.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c481a9476e2e Credits Rafie Muhammad Patchstack Required...

WordPress WP Simple Maintenance & Under Construction Mode Plugin <= 1.5.1 is vulnerable to Cross Site Scripting (XSS)

Software WP Simple Maintenance & Under Construction Mode Type Plugin Vulnerable versions = 1.5.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID ae5ab24add7b Credits...

WordPress Woo Products Widgets For Elementor Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)

Software Woo Products Widgets For Elementor Type Plugin Vulnerable versions = 1.0.9 Fixed in 2.0.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID f6d3aaaf2714 Credits Rafie Muhamma...

WordPress Awesome Social Icons Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)

Software Awesome Social Icons Type Plugin Vulnerable versions = 2.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID f6cd734fb895 Credits Rafie Muhammad Patchstack...

WordPress WPHobby Demo Import Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)

Software WPHobby Demo Import Type Plugin Vulnerable versions = 1.1.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID d1dee08a5293 Credits Rafie Muhammad Patchstack...

WordPress Distancr – Price by Location for WooCommerce Plugin <= 1.1.8 is vulnerable to Cross Site Scripting (XSS)

Software Distancr – Price by Location for WooCommerce Type Plugin Vulnerable versions = 1.1.8 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID fc09f6eee010 Credits Rafie...

WordPress One Click Login Plugin <= 1.24.0 is vulnerable to Cross Site Scripting (XSS)

Software One Click Login Type Plugin Vulnerable versions = 1.24.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2aa3a0f8b2a9 Credits Rafie Muhammad Patchstack Require...

WordPress SEO URL Redirects LlamasApps Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)

Software SEO URL Redirects LlamasApps Type Plugin Vulnerable versions = 2.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID d63e22bcb649 Credits Rafie Muhammad Patchsta...

WordPress WooCommerce Simple Frontend Manager Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)

Software WooCommerce Simple Frontend Manager Type Plugin Vulnerable versions = 1.0.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID cc140bdd2f32 Credits Rafie Muhammad...

WordPress WP Delicious Plugin < 1.5.3 is vulnerable to Cross Site Scripting (XSS)

Software WP Delicious Type Plugin Vulnerable versions 1.5.3 Fixed in 1.5.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID f958188390a5 Credits Rafie Muhammad Patchstack Required...