PT-2023-15987

Name of the Vulnerable Software and Affected Versions ResponsiveVoice Text To Speech WordPress plugin versions prior to 1.7.7 Description The issue allows users with the contributor role and above to perform Stored Cross-Site Scripting attacks due to the plugin's failure to validate and escape so...

WordPress Plugin Page View Count 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

PT-2023-14992

Name of the Vulnerable Software and Affected Versions PDF.js Viewer WordPress plugin versions prior to 2.1.8 Description The issue arises from the PDF.js Viewer WordPress plugin not validating and escaping some of its shortcode attributes before outputting them back in a page or post where the...

CVE-2022-4833: Undefined Security Weakness

The YourChannel: Everything you want in a YouTube plugin WordPress plugin before 1.2.3 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...

PT-2023-16038

Name of the Vulnerable Software and Affected Versions WordPrezi WordPress plugin versions prior to 0.9 Description The issue concerns a lack of validation and escaping of certain shortcode attributes in the WordPrezi WordPress plugin, which could allow users with the contributor role and above to...

PT-2023-15440

Name of the Vulnerable Software and Affected Versions Materialis Companion WordPress plugin versions prior to 1.3.40 Description The issue arises from the plugin's failure to validate and escape some of its shortcode attributes before outputting them back in the page. This could allow users with ...

PT-2023-16064

Name of the Vulnerable Software and Affected Versions Annual Archive WordPress plugin versions prior to 1.6.0 Description The issue allows users with the contributor role and above to perform Stored Cross-Site Scripting attacks due to the lack of validation and escaping of some shortcode...

PT-2023-16043

Name of the Vulnerable Software and Affected Versions GamiPress WordPress plugin versions prior to 1.0.9 Description The issue concerns the GamiPress WordPress plugin, which does not properly validate and escape certain shortcode attributes before outputting them in a page or post. This could all...

PT-2023-15756

Name of the Vulnerable Software and Affected Versions The Clean Login WordPress plugin versions prior to 1.13.7 Description The issue concerns a lack of validation and escaping of certain shortcode attributes, which can lead to Stored Cross-Site Scripting attacks. Users with a role as low as...

PT-2023-16032

Name of the Vulnerable Software and Affected Versions Send PDF for Contact Form 7 WordPress plugin versions prior to 0.9.9.2 Description The issue allows users with a role as low as contributor to perform Stored Cross-Site Scripting attacks, which could be used against high privilege users such a...

PT-2023-16039

Name of the Vulnerable Software and Affected Versions Cloak Front End Email WordPress plugin versions prior to 1.9.2 Description The issue allows users with the contributor role and above to perform Stored Cross-Site Scripting attacks due to the lack of validation and escaping of some shortcode...

CVE-2023-0150: Undefined Security Weakness

The Cloak Front End Email WordPress plugin before 1.9.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

WordPress Plugin WordPrezi 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

PT-2023-14889

Name of the Vulnerable Software and Affected Versions PPWP WordPress plugin versions prior to 1.8.6 Description The issue allows users with a low role, such as contributor, to perform Stored Cross-Site Scripting attacks against high-privilege users like admins, due to the lack of validation and...

PT-2023-15646

Name of the Vulnerable Software and Affected Versions WP-ShowHide WordPress plugin versions prior to 1.05 Description The issue allows users with a role as low as contributor to perform Stored Cross-Site Scripting attacks, which could be used against high privilege users such as admins. This is d...

WordPress plugin WP-ShowHide 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress Plugin Send PDF for Contact Form 7 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. WordPress plugin is an application plug-in. A cross-site scripting...

WordPress Plugin Cloak Front End Email 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress plugin Breadcrumb 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2023-0070: Undefined Security Weakness

The ResponsiveVoice Text To Speech WordPress plugin before 1.7.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scriptin...