PT-2019-8511

Name of the Vulnerable Software and Affected Versions mailchimp-for-wp plugin versions prior to 4.1.8 Description The issue concerns a problem where the return value of add query arg can be exploited, leading to XSS. Recommendations For versions prior to 4.1.8, update to version 4.1.8 or later to...

PT-2019-7280

Name of the Vulnerable Software and Affected Versions shortcode-factory plugin versions prior to 1.1.1 for WordPress Description The issue is related to a Cross-Site Scripting XSS vulnerability. It occurs via the add query arg function. Recommendations For versions prior to 1.1.1, update to versi...

PT-2019-7253

Name of the Vulnerable Software and Affected Versions all-in-one-wp-security-and-firewall plugin versions prior to 3.9.5 Description The issue concerns a cross-site scripting XSS problem in the add query arg and remove query arg function instances. This could potentially allow attackers to inject...

PT-2019-7255

Name of the Vulnerable Software and Affected Versions download-monitor plugin versions prior to 1.7.1 Description The issue is related to a Cross-Site Scripting XSS vulnerability. It affects the add query arg function. No information is provided about the estimated number of potentially affected...

PT-2019-7264 · WordPress · Wp-Google-Map-Plugin

Name of the Vulnerable Software and Affected Versions: wp-google-map-plugin versions prior to 2.3.7 Description: The issue is related to Cross-Site Scripting XSS and involves the add query arg and remove query arg functions. Recommendations: For versions prior to 2.3.7, update to version 2.3.7 or...

DEBIAN-CVE-2017-14313

The shibbolethloginform function in shibboleth.php in the Shibboleth plugin before 1.8 for WordPress is prone to an XSS vulnerability due to improper use of addqueryarg...

UBUNTU-CVE-2017-14313

The shibbolethloginform function in shibboleth.php in the Shibboleth plugin before 1.8 for WordPress is prone to an XSS vulnerability due to improper use of addqueryarg...

PT-2017-13384

Name of the Vulnerable Software and Affected Versions Shibboleth plugin versions prior to 1.8 Description The issue arises from the improper use of add query arg in the shibboleth login form function within the Shibboleth plugin for WordPress, leading to an XSS vulnerability. Recommendations For...