CVE-2023-33325 WordPress Leyka Plugin <= 3.30.1 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Teplitsa of social technologies Leyka plugin = 3.30.1 versions...

CVE-2023-39314

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Teplitsa of social technologies Leyka plugin = 3.30.2 versions...

CVE-2023-39314

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Teplitsa of social technologies Leyka plugin = 3.30.2 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Teplitsa of social technologies Leyka plugin = 3.30.2 versions...

CVE-2023-39314

CVE-2023-39314 affects the Leyka WordPress plugin (Teplitsa of social technologies) v1.x, specifically versions

CVE-2023-27450

Unauth. Stored Cross-Site Scripting XSS vulnerability in Teplitsa of social technologies Leyka plugin = 3.29.2 versions...

CVE-2023-27450

Unauth. Stored Cross-Site Scripting XSS vulnerability in Teplitsa of social technologies Leyka plugin = 3.29.2 versions...

Cross site scripting

Unauth. Stored Cross-Site Scripting XSS vulnerability in Teplitsa of social technologies Leyka plugin = 3.29.2 versions...

CVE-2023-27450

CVE-2023-27450 is an unauthenticated stored XSS in the WordPress Leyka plugin (

PT-2023-21138 · Teplitsa Of Social Technologies · Leyka Plugin

Name of the Vulnerable Software and Affected Versions: Teplitsa of social technologies Leyka plugin versions = 3.29.2 Description: The issue is related to an Unauth. Stored Cross-Site Scripting XSS vulnerability. No information is provided about the estimated number of potentially affected device...

CVE-2023-25052

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Teplitsa Yandex.News Feed by Teplitsa plugin = 1.12.5 versions...

CVE-2023-25052

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Teplitsa Yandex.News Feed by Teplitsa plugin = 1.12.5 versions...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Teplitsa Yandex.News Feed by Teplitsa plugin = 1.12.5 versions...

CVE-2023-25052 WordPress Yandex.News Feed by Teplitsa Plugin <= 1.12.5 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Teplitsa Yandex.News Feed by Teplitsa plugin = 1.12.5 versions...

CVE-2023-25052 WordPress Yandex.News Feed by Teplitsa Plugin <= 1.12.5 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Teplitsa Yandex.News Feed by Teplitsa plugin = 1.12.5 versions...

CVE-2023-25052

CVE-2023-25052 affects WordPress Yandex.News Feed by Teplitsa plugin versions 1.12.5 and earlier. The Red Hat advisory and Patchstack entry confirm an authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability, with impact limited to confidentiality/integrity and no listing of exploit...

Wordpress plugin Yandex.News Feed by Teplitsa 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2023-19899 · Teplitsa · Teplitsa Yandex.News Feed

Name of the Vulnerable Software and Affected Versions: Teplitsa Yandex.News Feed by Teplitsa plugin versions 1.12.5 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For versions...

Yandex.News Feed by Teplitsa <= 1.12.5 - Admin+ Stored XSS

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

WordPress Yandex.News Feed by Teplitsa Plugin <= 1.12.5 is vulnerable to Cross Site Scripting (XSS)

Software Yandex.News Feed by Teplitsa Type Plugin Vulnerable versions = 1.12.5 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-25052 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID e627f72e3987 Credits yuyudhn...