WordPress plugin wpForo Forum has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress plugin Easy Digital Downloads vulnerable to cross-site request forgeing attacks

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site request forgery vulnerability exists in the...

CVE-2022-41358

creationtimestamp| type| source ---|---|--- 2022-10-20 07:20:47+00:00| seen| https://t.me/cibsecurity/51861 2025-04-16 09:30:48+00:00| seen| https://bsky.app/profile/nimblenerd.social/post/3lmwbsfcyw52s 2025-04-17 21:02:29+00:00| seen|...

CVE-2022-3506

Cross-site Scripting XSS - Stored in GitHub repository barrykooij/related-posts-for-wp prior to 2.1.3...

CVE-2022-3506 Cross-site Scripting (XSS) - Stored in barrykooij/related-posts-for-wp

Cross-site Scripting XSS - Stored in GitHub repository barrykooij/related-posts-for-wp prior to 2.1.3...

CVE-2022-3506 Cross-site Scripting (XSS) - Stored in barrykooij/related-posts-for-wp

Cross-site Scripting XSS - Stored in GitHub repository barrykooij/related-posts-for-wp prior to 2.1.3...

CVE-2022-3506 Cross-site Scripting (XSS) - Stored in barrykooij/related-posts-for-wp

Cross-site Scripting XSS - Stored in GitHub repository barrykooij/related-posts-for-wp prior to 2.1.3...

CVE-2022-3506

CVE-2022-3506 corresponds to a stored XSS vulnerability in the WordPress Related Posts plugin (rp4wp) prior to version 2.1.3. Multiple connected sources confirm the flaw in the rp4wp[heading_text] parameter where unsanitized user input can inject arbitrary script, potentially compromising cookies...

CVE-2022-3506: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository barrykooij/related-posts-for-wp prior to 2.1.3...

PT-2022-22540 · WordPress · Related-Posts-For-Wp

Name of the Vulnerable Software and Affected Versions: related-posts-for-wp versions prior to 2.1.3 Description: The issue is related to Cross-site Scripting XSS - Stored, which affects the GitHub repository barrykooij/related-posts-for-wp. Recommendations: For versions prior to 2.1.3, update to...

CVE-2022-3506

Cross-site Scripting XSS - Stored in GitHub repository barrykooij/related-posts-for-wp prior to 2.1.3...

PT-2022-21380 · Mattermost · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost versions 7.1.x and earlier Description: The issue arises when a specifically crafted GIF file is uploaded while drafting a post, allowing authenticated users to cause resource exhaustion during file processing. This results in a...

WS-2022-0343

A Reflected Cross-Site-Scripting XSS vulnerability was found in barrykooij/related-posts-for-wp prior to 2.1.2. The rp4wpparent value is echoed without encoding...

Cotonti Siena cross-site scripting vulnerabilities

Cotonti Siena is a powerful open source web development framework and content manager from Cotonti Open Source. A security vulnerability exists in Cotonti Siena version 0.9.20, which originates from allowing administrators to conduct stored XSS attacks via forum posts...

CVE-2022-36600

BlogEngine v3.3.8.0 was discovered to contain a cross-site scripting XSS vulnerability in the component /blogengine/api/posts. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description field...

WordPress Netroics Blog Posts Grid 1.0 Plugin - Stored XSS Vulnerability

Exploit Title: WordPress Plugin Netroics Blog Posts Grid 1.0 - Stored Cross-Site Scripting XSS Exploit Author: saitamang, syad, yunaranyancat Vendor Homepage: wordpress.org Software Link: https://downloads.wordpress.org/plugin/netroics-blog-posts-grid.zip Version: 1.0 Tested on: Centos 7 apache2 ...

CVE-2022-36600: Improper Neutralization of Input During Web Page Generation

BlogEngine v3.3.8.0 was discovered to contain a cross-site scripting XSS vulnerability in the component /blogengine/api/posts. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description field...

WordPress Netroics Blog Posts Grid 1.0 Cross Site Scripting

Exploit Title: Stored XSS in posttitle parameter in WordPress Plugin "Netroics Blog Posts Grid" v1.0 Date: 08/08/2022 Exploit Author: saitamang, syad, yunaranyancat Vendor Homepage: wordpress.org Software Link: https://downloads.wordpress.org/plugin/netroics-blog-posts-grid.zip Version: 1.0 Teste...

WordPress Plugin Netroics Blog Posts Grid 1.0 - Stored Cross-Site Scripting (XSS)

Exploit Title: WordPress Plugin Netroics Blog Posts Grid 1.0 - Stored Cross-Site Scripting XSS Date: 08/08/2022 Exploit Author: saitamang, syad, yunaranyancat Vendor Homepage: wordpress.org Software Link: https://downloads.wordpress.org/plugin/netroics-blog-posts-grid.zip Version: 1.0 Tested on:...

BlogEngine cross-site scripting vulnerabilities

BlogEngine is an open source ASP.NET blog system . The system supports Ajax comments, custom themes and so on. A cross-site scripting vulnerability exists in BlogEngine version v3.3.8.0, which was discovered to contain a cross-site scripting XSS vulnerability via the component...