WordPress simple-membership plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. simple-membership plugin is a website membership plugin used in it. Cross-site scripting vulnerability exists in WordPress...

PT-2019-7680 · WordPress · Simple Membership

Name of the Vulnerable Software and Affected Versions: simple-membership plugin versions prior to 3.3.3 Description: The issue concerns multiple CSRF problems. Recommendations: For versions prior to 3.3.3, update to version 3.3.3 or later to resolve the issue...

CVE-2017-18498

The simple-job-board plugin before 2.4.4 for WordPress has reflected XSS via keyword search...

CVE-2017-18498

The simple-job-board plugin before 2.4.4 for WordPress has reflected XSS via keyword search...

CVE-2015-9302

The simple-fields plugin before 1.4.11 for WordPress has XSS...

CVE-2015-9302

The CVE-2015-9302 entry concerns the WordPress Simple Fields plugin. Affected product: WordPress with the simple-fields plugin versions prior to 1.4.11. Issue: Cross-Site Scripting (XSS) vulnerability in the plugin, as indicated by multiple sources (e.g., Red Hat, CNVD, CVE records). Root cause a...

CVE-2017-18498

The CVE affects the WordPress Simple Job Board plugin. Affected version range: before 2.4.4 (reported as before 2.4.4; other sources suggest

CVE-2017-18498

The simple-job-board plugin before 2.4.4 for WordPress has reflected XSS via keyword search...

PT-2019-7261 · WordPress · Simple-Fields

Name of the Vulnerable Software and Affected Versions: simple-fields plugin versions prior to 1.4.11 Description: The issue concerns a Cross-Site Scripting XSS problem. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-worl...

CVE-2017-18499

The simple-membership plugin before 3.5.7 for WordPress has XSS...

CVE-2017-18499

The simple-membership plugin before 3.5.7 for WordPress has XSS...

CVE-2015-9303

The simple-share-buttons-adder plugin before 6.0.0 for WordPress has XSS...

Cross site scripting

The simple-membership plugin before 3.5.7 for WordPress has XSS...

CVE-2017-18499

The simple-membership plugin before 3.5.7 for WordPress has XSS...

CVE-2017-18499

The CVE-2017-18499 entry affects the WordPress Simple Membership plugin (pre-3.5.7). The root cause is an XSS flaw in the plugin’s handling of client-side data without proper validation, enabling injection of client-side scripts. The impact is cross-site scripting within WordPress sites using thi...

CVE-2015-9303

CVE-2015-9303 affects the WordPress plugin Simple Share Buttons Adder, specifically versions prior to 6.0.0. Multiple connected sources describe a cross-site scripting (XSS) vulnerability in this plugin, with evidence of a reflected XSS class in public disclosures. The root cause is insufficient ...

PT-2019-8434 · WordPress · Simple Membership

Name of the Vulnerable Software and Affected Versions: simple-membership plugin versions prior to 3.5.7 Description: The issue is related to a cross-site scripting XSS problem. Recommendations: For versions prior to 3.5.7, update to version 3.5.7 or later to resolve the issue...

Simple 301 Redirects Addon Bulk Uploader <= 1.2.4 - Multiple Issues

Unauthenticated option changes vulnerability that could allow an attacker to redirect all pages and posts of the blog to a malicious website, as well as an authenticated options export/deletion vulnerability...

CVE-2019-13565

An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session encryption, and relying on the SASL security layers in slapd access controls, it is possible to obtain access that would otherwise be denied via a simple bind for any identity covered in those ACLs...

CVE-2019-10380

Jenkins Simple Travis Pipeline Runner Plugin 1.0 and earlier specifies unsafe values in its custom Script Security whitelist, allowing attackers able to execute Script Security protected scripts to execute arbitrary code...