WordPress Simple Feature Requests Free – User Feedback Board Plugin < 2.2.5.1 is vulnerable to Cross Site Scripting (XSS)

Software Simple Feature Requests Free – User Feedback Board Type Plugin Vulnerable versions 2.2.5.1 Fixed in 2.2.5.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 5f85daa19cb8...

WordPress AutoMail – Event-driven Email Automation. Easy email Notification and Auto-reply. Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Software AutoMail – Event-driven Email Automation. Easy email Notification and Auto-reply. Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim...

WordPress Premmerce WooCommerce Toolkit Plugin <= 1.1.6 is vulnerable to Cross Site Scripting (XSS)

Software Premmerce WooCommerce Toolkit Type Plugin Vulnerable versions = 1.1.6 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4559e551f8bb Credits Rafie Muhammad...

WordPress Floating Social Share Icons and Social Share buttons – Next Previous Post Links – FL Plugin <= 3.6.1 is vulnerable to Cross Site Scripting (XSS)

Software Floating Social Share Icons and Social Share buttons – Next Previous Post Links – FL Type Plugin Vulnerable versions = 3.6.1 Fixed in 3.6.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim...

WordPress Affiliate Link Builder Plugin for Amazon Associates – Review Engine Plugin <= 1.0.41 is vulnerable to Cross Site Scripting (XSS)

Software Affiliate Link Builder Plugin for Amazon Associates – Review Engine Type Plugin Vulnerable versions = 1.0.41 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID...

WordPress WooCommerce Extra Fees Lite - Use for Extra charge + Conditional Fee + Extra Cost for WooCommerce Plugin <= 1.2.9 is vulnerable to Cross Site Scripting (XSS)

Software WooCommerce Extra Fees Lite - Use for Extra charge + Conditional Fee + Extra Cost for WooCommerce Type Plugin Vulnerable versions = 1.2.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1...

WordPress WooCommerce Cross-Seller Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)

Software WooCommerce Cross-Seller Type Plugin Vulnerable versions = 1.0.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID e5e99150d929 Credits Rafie Muhammad Patchstack...

WordPress Login Designer Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)

Software Login Designer Type Plugin Vulnerable versions = 1.6.1 Fixed in 1.6.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 91d36b63e0ed Credits Rafie Muhammad Patchstack Require...

WordPress Post Grid for Elementor & Product Grid | PowerGrids Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)

Software Post Grid for Elementor & Product Grid | PowerGrids Type Plugin Vulnerable versions = 1.1.1 Fixed in 1.1.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b07b1b7c7042...

WordPress CartPops – High Converting Add To Cart Popup For WooCommerce Plugin <= 1.4.26 is vulnerable to Cross Site Scripting (XSS)

Software CartPops – High Converting Add To Cart Popup For WooCommerce Type Plugin Vulnerable versions = 1.4.26 Fixed in 1.4.28 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID...

WordPress Kenta Gutenberg Blocks Responsive Blocks and block templates library for Gutenberg Editor Plugin < 1.3.4 is vulnerable to Cross Site Scripting (XSS)

Software Kenta Gutenberg Blocks Responsive Blocks and block templates library for Gutenberg Editor Type Plugin Vulnerable versions 1.3.4 Fixed in 1.3.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer...

WordPress GOAuth Plugin <= 2.20 is vulnerable to Cross Site Scripting (XSS)

Software GOAuth Type Plugin Vulnerable versions = 2.20 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 1aeda2a1b24f Credits Rafie Muhammad Patchstack Required privilege...

WordPress Passster – Password Protection Plugin < 4.2.2 is vulnerable to Cross Site Scripting (XSS)

Software Passster – Password Protection Type Plugin Vulnerable versions 4.2.2 Fixed in 4.2.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Patrick Posner PSID 8b97c2c68b65 Credits Rafie Muhammad...

WordPress FullScreen Menu – Mobile Friendly and Responsive Plugin < 2.3.8 is vulnerable to Cross Site Scripting (XSS)

Software FullScreen Menu – Mobile Friendly and Responsive Type Plugin Vulnerable versions 2.3.8 Fixed in 2.3.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2c0779bc8b91 Credits...

WordPress Autocomplete Address and Location Picker for WooCommerce Plugin < 1.1.7 is vulnerable to Cross Site Scripting (XSS)

Software Autocomplete Address and Location Picker for WooCommerce Type Plugin Vulnerable versions 1.1.7 Fixed in 1.1.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 29d5be08998e...

WordPress Woocommerce Newsletter Image Generator Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Woocommerce Newsletter Image Generator Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 639c79648d62 Credits Rafie...

WordPress Primary Addon for Elementor Plugin < 1.5.3 is vulnerable to Cross Site Scripting (XSS)

Software Primary Addon for Elementor Type Plugin Vulnerable versions 1.5.3 Fixed in 1.5.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 636a21480ff8 Credits Rafie Muhammad...

WordPress Floating Awesome Button Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)

Software Floating Awesome Button Type Plugin Vulnerable versions = 1.6.1 Fixed in 1.7.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID a554276c1f96 Credits Rafie Muhammad Patchstac...

WordPress Knowledge Base documentation & wiki plugin – BasePress Plugin <= 2.15.20 is vulnerable to Cross Site Scripting (XSS)

Software Knowledge Base documentation & wiki plugin – BasePress Type Plugin Vulnerable versions = 2.15.20 Fixed in 2.15.21 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 16b7efd2ba...

WordPress Battle Suit for Divi Plugin <= 1.17.0 is vulnerable to Cross Site Scripting (XSS)

Software Battle Suit for Divi Type Plugin Vulnerable versions = 1.17.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 008027bf67c9 Credits Rafie Muhammad Patchstack...