125 matches found
CVE-2025-58974
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in StellarWP WPComplete wpcomplete allows Stored XSS.This issue affects WPComplete: from n/a through = 2.9.5.2...
CVE-2025-58974
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in StellarWP WPComplete wpcomplete allows Stored XSS.This issue affects WPComplete: from n/a through = 2.9.5.2...
CVE-2025-58974: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in StellarWP WPComplete wpcomplete allows Stored XSS.This issue affects WPComplete: from n/a through = 2.9.5.2...
PT-2025-39031
Name of the Vulnerable Software and Affected Versions StellarWP WPComplete versions through 2.9.5.2 Description An issue exists in StellarWP WPComplete that allows for Stored Cross-site Scripting XSS. The issue is due to improper neutralization of input during web page generation. This could allo...
WordPress GiveWP – Donation Plugin and Fundraising Platform plugin <= 4.5.0 - Authenticated (GiveWP worker+) Stored Cross-Site Scripting vulnerability
Authenticated GiveWP worker+ Stored Cross-Site Scripting vulnerability discovered by Brian Sans-Souci liardom in WordPress Plugin GiveWP versions = 4.5.0...
CVE-2025-50046
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in StellarWP WPComplete wpcomplete allows Stored XSS.This issue affects WPComplete: from n/a through = 2.9.5...
CVE-2025-50046 WordPress WPComplete plugin <= 2.9.5 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in StellarWP WPComplete wpcomplete allows Stored XSS.This issue affects WPComplete: from n/a through = 2.9.5...
CVE-2025-50046
CVE-2025-50046 concerns StellarWP WPComplete. Affected: WPComplete versions n/a through 2.9.5. Issue: Improper neutralization of input during web page generation, enabling Stored XSS. Consequence: stored script execution in user contexts (per CVSS metrics: Medium severity, 6.5/10). Status: patch/...
CVE-2025-50046: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in StellarWP WPComplete wpcomplete allows Stored XSS.This issue affects WPComplete: from n/a through = 2.9.5...
PT-2025-26397 · Stellarwp · Stellarwp Wpcomplete
Name of the Vulnerable Software and Affected Versions: StellarWP WPComplete versions n/a through 2.9.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...
WordPress GiveWP – Donation Plugin and Fundraising Platform plugin <= 4.3.0 - Missing Authorization To Authenticated (Contributor+) Campaign Data View And Modification vulnerability
Missing Authorization To Authenticated Contributor+ Campaign Data View And Modification vulnerability discovered by Brian Sans-Souci liardom in WordPress Plugin GiveWP versions = 4.3.0...
CVE-2024-31432
Missing Authorization vulnerability in StellarWP Restrict Content.This issue affects Restrict Content: from n/a through 3.2.8...
CVE-2023-47668
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in StellarWP Membership Plugin – Restrict Content plugin = 3.2.7 versions...
CVE-2023-23672
Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP.This issue affects GiveWP: from n/a through 2.25.1...
WordPress The Events Calendar plugin <= 6.11.2.1 - Broken Access Control Vulnerability
Broken Access Control Vulnerability discovered by domiee13 in WordPress Plugin The Events Calendar versions = 6.11.2.1...
WordPress The Events Calendar plugin < 6.6.4 - Admin+ Stored XSS vulnerability
Admin+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin The Events Calendar versions 6.6.4...
CVE-2025-48246: Missing Authorization
Missing Authorization vulnerability in StellarWP The Events Calendar the-events-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Events Calendar: from n/a through = 6.11.2.1...
CVE-2025-30794: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in StellarWP Event Tickets event-tickets allows Reflected XSS.This issue affects Event Tickets: from n/a through = 5.20.0...
CVE-2025-24537: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in StellarWP The Events Calendar the-events-calendar allows Cross Site Request Forgery.This issue affects The Events Calendar: from n/a through = 6.7.0...
