CVE-2022-4717: Undefined Security Weakness

The Strong Testimonials WordPress plugin before 3.0.3 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...

WordPress plugin Clean Login 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

CVE-2022-4657: Undefined Security Weakness

The Restaurant Menu WordPress plugin before 2.3.6 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2022-4626: Undefined Security Weakness

The PPWP WordPress plugin before 1.8.6 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users...

WordPress plugin Simple Tooltips 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2023-15708

Name of the Vulnerable Software and Affected Versions YourChannel: Everything you want in a YouTube plugin WordPress plugin versions prior to 1.2.3 Description The issue allows users with a role as low as contributor to perform Stored Cross-Site Scripting attacks, which could be used against high...

PT-2023-16057

Name of the Vulnerable Software and Affected Versions jQuery T- Countdown Widget WordPress plugin versions prior to 2.3.24 Description The issue allows users with the contributor role and above to perform Stored Cross-Site Scripting attacks due to the plugin's failure to validate and escape some ...

WordPress plugin My YouTube Channel 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2023-15402

Name of the Vulnerable Software and Affected Versions My YouTube Channel WordPress plugin versions prior to 3.23.0 Description The issue concerns a lack of validation and escaping of certain shortcode attributes, which can lead to Stored Cross-Site Scripting attacks. Users with a role as low as...

WordPress plugin Ibtana 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

PT-2023-15989

Name of the Vulnerable Software and Affected Versions WC Vendors Marketplace WordPress plugin versions prior to 2.4.5 Description The issue concerns a lack of validation and escaping of certain shortcode attributes, which could allow users with the contributor role and above to perform Stored...

PT-2023-16056

Name of the Vulnerable Software and Affected Versions Html5 Audio Player WordPress plugin versions prior to 2.1.12 Description The issue allows users with the contributor role and above to perform Stored Cross-Site Scripting attacks due to the lack of validation and escaping of some shortcode...

PT-2023-15212

Name of the Vulnerable Software and Affected Versions Strong Testimonials WordPress plugin versions prior to 3.0.3 Description The issue concerns the failure to validate and escape certain shortcode attributes, which can lead to Stored Cross-Site Scripting attacks. Users with a role as low as...

PT-2023-16060

Name of the Vulnerable Software and Affected Versions WP VR WordPress plugin versions prior to 8.2.7 Description The issue concerns the WP VR WordPress plugin, which does not properly validate and escape certain shortcode attributes before outputting them in a page or post. This could allow users...

PT-2023-16036

Name of the Vulnerable Software and Affected Versions Flexible Captcha WordPress plugin versions prior to 4.1 Description The issue allows users with the contributor role and above to perform Stored Cross-Site Scripting attacks due to the lack of validation and escaping of some shortcode...

WordPress Plugin WC Vendors Marketplace 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress plugin Materialis Companion 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress Plugin Vimeo Video Autoplay Automute 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

CVE-2022-4677: Undefined Security Weakness

The Leaflet Maps Marker WordPress plugin before 3.12.7 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack...

WordPress Plugin Flexible Captcha 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...