CVE-2024-9371

The Branda – White Label & Branding, Custom Login Page Customizer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of removequeryarg without appropriate escaping on the URL in all versions up to, and including, 3.4.19. This makes it possible for unauthenticated...

CVE-2015-9361

The Related Posts plugin before 1.8.2 for WordPress has XSS via addqueryarg and removequeryarg...

WordPress plugin Digital License Manager has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-12789

Name of the Vulnerable Software and Affected Versions Digital License Manager plugin for WordPress versions up to, and including, 1.7.3 Description The issue is related to Reflected Cross-Site Scripting due to the use of the remove query arg function without proper escaping on the URL. This allow...

WordPress Digital License Manager plugin <= 1.7.3 - Reflected Cross-Site Scripting via remove_query_arg Function vulnerability

Reflected Cross-Site Scripting via removequeryarg Function vulnerability discovered by Peter Thaleikis in WordPress Plugin Digital License Manager versions = 1.7.3...

PT-2025-11240

Name of the Vulnerable Software and Affected Versions: The CM FAQ – Simplify support with an intuitive FAQ management tool plugin for WordPress versions up to, and including, 1.2.5 Description: The issue is related to Reflected Cross-Site Scripting due to the use of remove query arg without...

PT-2025-9795

Name of the Vulnerable Software and Affected Versions Razorpay Subscription Button Elementor Plugin versions up to, and including, 1.0.3 Description The issue arises from the use of add query arg and remove query arg functions without proper escaping on the URL, leading to Reflected Cross-Site...

PT-2025-2250 · WordPress · Stageshow

Name of the Vulnerable Software and Affected Versions: StageShow plugin for WordPress versions prior to 9.8.7 Description: The StageShow plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove query arg without appropriate escaping on the URL. This allows...

PT-2024-15994 · WordPress · Persian Woocommerce Sms

Name of the Vulnerable Software and Affected Versions: Persian WooCommerce SMS plugin for WordPress versions up to, and including, 7.0.5 Description: The issue is related to Reflected Cross-Site Scripting due to the use of remove query arg without appropriate escaping on the URL. This allows...

WordPress plugin TWChat has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

PT-2024-16944 · WordPress · Twchat

Name of the Vulnerable Software and Affected Versions: TWChat – Send or receive messages from users plugin for WordPress versions up to, and including, 4.0.4 Description: The issue is related to Reflected Cross-Site Scripting due to the use of remove query arg without appropriate escaping on the...

WordPress plugin: WooCommerce Persian WooCommerce SMS – Cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin.... WordPress plugin افزونه پیامک...

WordPress plugin ForumWP has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. WordPress plugin...

PT-2024-16623

Name of the Vulnerable Software and Affected Versions WPAdverts – Classifieds Plugin versions prior to 2.1.8 Description The issue is related to Reflected Cross-Site Scripting, which occurs due to the use of add query arg and remove query arg without proper escaping on the URL. This allows...

PT-2024-39599 · WordPress · Branda – White Label & Branding

Name of the Vulnerable Software and Affected Versions: The Branda – White Label & Branding, Custom Login Page Customizer plugin for WordPress versions up to, and including, 3.4.19 Description: The issue is related to Reflected Cross-Site Scripting due to the use of remove query arg without...

PT-2024-16457

Name of the Vulnerable Software and Affected Versions The Announcement & Notification Banner – Bulletin plugin for WordPress versions up to, and including, 3.11.7 Description The issue is related to Reflected Cross-Site Scripting, which occurs due to the use of add query arg and remove query arg...

PT-2024-16934

Name of the Vulnerable Software and Affected Versions Page Parts plugin for WordPress versions up to, and including, 1.4.3 Description The issue is related to Reflected Cross-Site Scripting due to the use of remove query arg without appropriate escaping on the URL. This allows unauthenticated...

PT-2024-16616

Name of the Vulnerable Software and Affected Versions The Product Delivery Date for WooCommerce – Lite plugin for WordPress versions up to, and including, 2.8.0 Description The issue is related to Reflected Cross-Site Scripting due to the use of add query arg and remove query arg without...

PT-2024-16589

Name of the Vulnerable Software and Affected Versions Razorpay Payment Button Elementor Plugin versions 1.2.5 and earlier Description The issue is related to Reflected Cross-Site Scripting due to the use of add query arg and remove query arg without proper escaping on the URL. This allows...

WordPress plugin WS Form LITE has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...