WordPress STAX Header Builder Plugin <= 1.3.6 is vulnerable to Cross Site Scripting (XSS)

Software STAX Header Builder Type Plugin Vulnerable versions = 1.3.6 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 8750093fc2e7 Credits Rafie Muhammad Patchstack...

WordPress STAX Header Builder plugin < 1.3.6 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress STAX Header Builder plugin versions 1.3.6. Solution Update the WordPress STAX Header Builder plugin to the latest available version at least 1.3.6...

WordPress STAX Header Builder plugin < 1.3.6 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress STAX Header Builder plugin versions 1.3.6. Solution Update the WordPress STAX Header Builder plugin to the latest available version at least 1.3.6...