WordPress Dracula Dark Mode - The Revolutionary Dark Mode Plugin For WordPress Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Dracula Dark Mode - The Revolutionary Dark Mode Plugin For WordPress Type Plugin Vulnerable versions = 1.0.0 Fixed in 1.0.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID...

WordPress Template Manager for Gutenberg Block Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)

Software Template Manager for Gutenberg Block Type Plugin Vulnerable versions = 1.0.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 011e9bd91ed5 Credits Rafie Muhamma...

WordPress Blocks Bakery – Gutenberg Blocks Plugin <= 1.0.12 is vulnerable to Cross Site Scripting (XSS)

Software Blocks Bakery – Gutenberg Blocks Type Plugin Vulnerable versions = 1.0.12 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4de5fd74e476 Credits Rafie Muhammad...

WordPress WP Simple Maintenance & Under Construction Mode Plugin <= 1.5.1 is vulnerable to Cross Site Scripting (XSS)

Software WP Simple Maintenance & Under Construction Mode Type Plugin Vulnerable versions = 1.5.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID ae5ab24add7b Credits...

WordPress Web3 Coin Gate Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Web3 Coin Gate Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 861b0c7c736e Credits Rafie Muhammad Patchstack Required...

WordPress WooCommerce Quick Reports Plugin <= 2.7.1 is vulnerable to Cross Site Scripting (XSS)

Software WooCommerce Quick Reports Type Plugin Vulnerable versions = 2.7.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 03b59d7f21d4 Credits Rafie Muhammad Patchstac...

WordPress Fast Index Plugin <= 1.9 is vulnerable to Cross Site Scripting (XSS)

Software Fast Index Type Plugin Vulnerable versions = 1.9 Fixed in 1.10 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 1efd80ca1662 Credits Rafie Muhammad Patchstack Required...

WordPress FIT: Featured Image Toolkit Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)

Software FIT: Featured Image Toolkit Type Plugin Vulnerable versions = 1.0.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 475578139d43 Credits Rafie Muhammad...

WordPress Before and After Product Images for WooCommerce Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)

Software Before and After Product Images for WooCommerce Type Plugin Vulnerable versions = 1.0.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 667bb1121fd9 Credits...

WordPress Table & Contact Form 7 Database – Tablesome Plugin < 1.0.15 is vulnerable to Cross Site Scripting (XSS)

Software Table & Contact Form 7 Database – Tablesome Type Plugin Vulnerable versions 1.0.15 Fixed in 1.0.15 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 61904bf8ec90 Credits Rafi...

WordPress Goal Tracker - Custom Event Tracking for GA4 Plugin < 1.0.11 is vulnerable to Cross Site Scripting (XSS)

Software Goal Tracker - Custom Event Tracking for GA4 Type Plugin Vulnerable versions 1.0.11 Fixed in 1.0.11 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID e97011f95aa7 Credits Raf...

WordPress WP Tools Divi Product Carousel Plugin < 1.5.1 is vulnerable to Cross Site Scripting (XSS)

Software WP Tools Divi Product Carousel Type Plugin Vulnerable versions 1.5.1 Fixed in 1.5.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 42d03d30e091 Credits Rafie Muhammad...

WordPress Elements for LifterLMS Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)

Software Elements for LifterLMS Type Plugin Vulnerable versions = 1.1.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 14147c9755eb Credits Rafie Muhammad Patchstack...

WordPress Woo Products Widgets For Elementor Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)

Software Woo Products Widgets For Elementor Type Plugin Vulnerable versions = 1.0.9 Fixed in 2.0.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID f6d3aaaf2714 Credits Rafie Muhamma...

WordPress WP Contact Slider Plugin <= 2.4.8 is vulnerable to Cross Site Scripting (XSS)

Software WP Contact Slider Type Plugin Vulnerable versions = 2.4.8 Fixed in 2.4.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 7425e4a52284 Credits Rafie Muhammad Patchstack...

WordPress Awesome Social Icons Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)

Software Awesome Social Icons Type Plugin Vulnerable versions = 2.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID f6cd734fb895 Credits Rafie Muhammad Patchstack...

WordPress azw woocommerce file uploads Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software azw woocommerce file uploads Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID eff1363b8435 Credits Rafie Muhammad...

WordPress YouTube Responsive Gallery Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)

Software YouTube Responsive Gallery Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 53d93d2b0d34 Credits Rafie Muhammad Patchstack...

WordPress SVG Flags – Beautiful Scalable Flags For All Countries! Plugin <= 0.9.6 is vulnerable to Cross Site Scripting (XSS)

Software SVG Flags – Beautiful Scalable Flags For All Countries! Type Plugin Vulnerable versions = 0.9.6 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 9d8c58ac2463...

WordPress SLP – Extended Data Manager Plugin <= 6.1.1 is vulnerable to Cross Site Scripting (XSS)

Software SLP – Extended Data Manager Type Plugin Vulnerable versions = 6.1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 8d2e98c75731 Credits Rafie Muhammad...