WordPress CM On Demand Search and Replace plugin <= 1.4.2 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin CM On Demand Search And Replace versions = 1.4.2...

WordPress Video Lessons Manager plugin <= 1.8.2 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin Video Lessons Manager versions = 1.8.2...

WordPress Video Lessons Manager Plugin <= 1.8.2 is vulnerable to Cross Site Scripting (XSS)

Software Video Lessons Manager Type Plugin Vulnerable versions = 1.8.2 Fixed in 1.8.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11202 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID de6edf652333 Credits Peter...

WordPress CM On Demand Search And Replace Plugin <= 1.4.2 is vulnerable to Cross Site Scripting (XSS)

Software CM On Demand Search And Replace Type Plugin Vulnerable versions = 1.4.2 Fixed in 1.4.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11202 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID cf0ce3925274 Credits...

WordPress JobBoardWP plugin <= 1.3.0 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin JobBoardWP – Job Board Listings and Submissions versions = 1.3.0...

WordPress Tribute Testimonials plugin <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin Tribute Testimonials versions = 1.0.4...

WordPress Quotes llama plugin <= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin Quotes llama versions = 3.0.0...

WordPress StreamWeasels Online Status Bar plugin <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin StreamWeasels Online Status Bar versions = 2.1.9...

WordPress affiliate-toolkit plugin <= 3.6.7 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin affiliate-toolkit versions = 3.6.7...

WordPress WPAdverts plugin <= 2.1.7 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin WPAdverts versions = 2.1.7...

WordPress Include Mastodon Feed plugin <= 1.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin Include Mastodon Feed versions = 1.9.5...

WordPress Include Mastodon Feed Plugin <= 1.9.5 is vulnerable to Cross Site Scripting (XSS)

Software Include Mastodon Feed Type Plugin Vulnerable versions = 1.9.5 Fixed in 1.9.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11455 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 6b915ee78c03 Credits Peter Thaleikis...

CVE-2024-50520

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Peter J. Herrel Ancient World Linked Data ancient-world-linked-data-for-wordpress allows DOM-Based XSS.This issue affects Ancient World Linked Data: from n/a through = 0.2.1...

CVE-2024-50520 WordPress Ancient World Linked Data plugin <= 0.2.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Peter J. Herrel Ancient World Linked Data ancient-world-linked-data-for-wordpress allows DOM-Based XSS.This issue affects Ancient World Linked Data: from n/a through = 0.2.1...

CVE-2024-50520

CVE-2024-50520 relates to the WordPress plugin “Ancient World Linked Data” (up to version 0.2.1). The issue is a DOM-based Cross-Site Scripting (XSS) caused by improper input neutralization during page generation, enabling script execution in the context of the affected site. Affected software: A...

WordPress Email Subscription Popup plugin <= 1.2.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via print_email_subscribe_form Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via printemailsubscribeform Shortcode vulnerability discovered by Peter Thaleikis in WordPress Plugin Email Subscription Popup versions = 1.2.22...

WordPress SimpleForm Contact Form Submissions plugin <= 2.1.0 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin SimpleForm Contact Form Submissions versions = 2.1.0...

WordPress SimpleForm plugin <= 2.2.0 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin SimpleForm versions = 2.2.0...

WordPress Product Delivery Date for WooCommerce - Lite plugin <= 2.8.0 - Reflected Cross-Site Scripting vulnerability

WordPress Product Delivery Date for WooCommerce - Lite plugin = 2.8.0 - Reflected Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin Product Delivery Date for WooCommerce – Lite versions = 2.8.0...

WordPress Social Proof (Testimonials) Slider plugin <= 2.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin Social Proof Testimonial Slider versions = 2.2.4...