WordPress Plugin WP Dark Mode 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress Plugin Login Logout Menu 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

PT-2023-16222 · WordPress · Embedstories

Name of the Vulnerable Software and Affected Versions: EmbedStories WordPress plugin versions prior to 0.7.5 Description: The issue concerns a lack of validation and escaping of certain shortcode attributes in the EmbedStories WordPress plugin, which could allow users with the contributor role an...

PT-2023-15448

Name of the Vulnerable Software and Affected Versions The Simple File Downloader WordPress plugin versions 1.0.0 through 1.0.4 Description The issue concerns the lack of validation and escaping of certain shortcode attributes in the plugin, which can lead to Stored Cross-Site Scripting attacks...

WordPress plugin GS Products Slider for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2023-0559: Undefined Security Weakness

The GS Portfolio for Envato WordPress plugin before 1.4.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embedded, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting...

PT-2023-15495

Name of the Vulnerable Software and Affected Versions Video.js WordPress plugin versions through 4.5.0 Description The issue concerns the Video.js WordPress plugin, which does not properly validate and escape certain shortcode attributes before outputting them in a page or post where the shortcod...

CVE-2023-0492: Undefined Security Weakness

The GS Products Slider for WooCommerce WordPress plugin before 1.5.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site...

PT-2023-16257

Name of the Vulnerable Software and Affected Versions Shortcode for Font Awesome WordPress plugin versions prior to 1.4.1 Description The issue concerns the Shortcode for Font Awesome WordPress plugin, which does not properly validate and escape some of its shortcode attributes before outputting...

WordPress plugin GS Portfolio for Envato 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2023-0371: Improper Neutralization of Input During Web Page Generation

The EmbedSocial WordPress plugin before 1.1.28 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

WordPress Plugin Markup 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

CVE-2022-4785: Undefined Security Weakness

The Video Sidebar Widgets WordPress plugin through 6.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

WordPress plugin EmbedStories 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

PT-2023-16304 · WordPress · Product Slider For Woocommerce

Name of the Vulnerable Software and Affected Versions: GS Products Slider for WooCommerce WordPress plugin versions prior to 1.5.9 Description: The issue concerns the lack of validation and escaping of certain shortcode attributes, which could allow users with the contributor role and above to...

PT-2023-14991

Name of the Vulnerable Software and Affected Versions The Page Builder: Live Composer WordPress plugin versions prior to 1.5.23 Description The issue concerns the lack of validation and escaping of certain shortcode attributes in the plugin, which could allow users with the contributor role and...

CVE-2022-4752: Improper Neutralization of Input During Web Page Generation

The Opening Hours WordPress plugin through 2.3.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2022-4622: Undefined Security Weakness

The Login Logout Menu WordPress plugin through 1.3.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2022-4666: Undefined Security Weakness

The Markup JSON-LD structured in schema.org WordPress plugin through 4.8.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Sit...

CVE-2022-4761: Undefined Security Weakness

The Post Views Count WordPress plugin through 3.0.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...