2 matches found
CVE-2015-9358
The feedwordpress plugin before 2015.0514 for WordPress has XSS via addqueryarg and removequeryarg...
CVE-2024-8714
The WordPress Affiliates Plugin — SliceWP Affiliates plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of removequeryarg without appropriate escaping on the URL in all versions up to, and including, 1.1.20. This makes it possible for unauthenticated attackers to...