PT-2025-26398 · Sitekit · Sitekit

Name of the Vulnerable Software and Affected Versions: Sitekit versions n/a through 1.9 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables potential attackers to inject malicious...

WordPress plugin Sitekit 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress Sitekit plugin <= 1.9 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Sitekit versions = 1.9...

CVE-2024-29111

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webvitaly Sitekit allows Stored XSS.This issue affects Sitekit: from n/a through 1.6...

CVE-2023-27628

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Webvitaly Sitekit plugin = 1.3 versions...

CVE-2023-5071

The Sitekit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'sitekitiframe' shortcode in versions up to, and including, 1.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above...

CVE-2025-30776

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webvitaly Sitekit sitekit allows Stored XSS.This issue affects Sitekit: from n/a through = 1.8...

CVE-2025-30776

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webvitaly Sitekit sitekit allows Stored XSS.This issue affects Sitekit: from n/a through = 1.8...

CVE-2025-30776 WordPress Sitekit plugin <= 1.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webvitaly Sitekit sitekit allows Stored XSS.This issue affects Sitekit: from n/a through = 1.8...

CVE-2025-30776 WordPress Sitekit plugin <= 1.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webvitaly Sitekit sitekit allows Stored XSS.This issue affects Sitekit: from n/a through = 1.8...

CVE-2025-30776

CVE-2025-30776: Stored XSS in Sitekit (WordPress plugin by webvitaly) due to improper input neutralization during web page generation. Affected versions are Sitekit from an unspecified earliest version up to 1.8.0. CVSS 3.1 base score 6.5 (Medium) with NETWORK attack vector, low privileges, user ...

WordPress Sitekit plugin <= 1.8 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Sitekit versions = 1.8...

WordPress plugin Sitekit 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

Sitekit < 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Description The Sitekit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 1.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attacker...

CVE-2024-29111

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webvitaly Sitekit allows Stored XSS.This issue affects Sitekit: from n/a through 1.6...

CVE-2024-29111 WordPress Sitekit plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webvitaly Sitekit allows Stored XSS.This issue affects Sitekit: from n/a through 1.6...

CVE-2024-29111 WordPress Sitekit plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webvitaly Sitekit allows Stored XSS.This issue affects Sitekit: from n/a through 1.6...

CVE-2024-29111

CVE-2024-29111 affects Sitekit (Webvitaly Sitekit) up to version 1.6. Root cause: Improper neutralization of input during web page generation enabling Stored XSS. Impact: Stored cross-site scripting on affected Sitekit pages. No patch/fix details provided in the available documents.

PT-2024-22732 · Webvitaly · Webvitaly Sitekit

Name of the Vulnerable Software and Affected Versions: Webvitaly Sitekit versions n/a through 1.6 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

WordPress Plugin Sitekit Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...