Cross site scripting

The wp-ultimate-recipe plugin before 3.12.7 for WordPress has stored XSS...

CVE-2019-15836

CVE-2019-15836 affects the WordPress plugin wp-ultimate-recipe, with stored XSS in versions before 3.12.7. The vulnerability is introduced in the plugin code and leads to client‑side code execution when exploited. Remediation per available sources is to upgrade to version 3.12.7 or later. Exploit...

WordPress ultimate-faqs plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. ultimate-faqs is a FAQ plugin used in it. A cross-site scripting vulnerability exists in the WordPress ultimate-faqs plugin. An attack...

WordPress shortcodes-ultimate plugin input validation error vulnerability

WordPress is a blogging platform from the WordPress Foundation developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. shortcodes-ultimate is one of the plugins used in it, which supports the creation of tabs, buttons, sliders,...

CVE-2019-15643

The ultimate-faqs plugin before 1.8.22 for WordPress has XSS...

CVE-2019-15643

The ultimate-faqs plugin before 1.8.22 for WordPress has XSS...

Cross site scripting

The ultimate-faqs plugin before 1.8.22 for WordPress has XSS...

CVE-2019-15643

The ultimate-faqs plugin before 1.8.22 for WordPress has XSS...

CVE-2019-15643

CVE-2019-15643 affects the WordPress Ultimate FAQ plugin, specifically versions before 1.8.22, with a cross-site scripting (XSS) vulnerability. The root cause and exact exploitation details are not provided in the connected documents, but multiple sources corroborate the XSS risk in this plugin. ...

CVE-2017-18580

The shortcodes-ultimate plugin before 5.0.1 for WordPress has remote code execution via a filter in a meta, post, or user shortcode...

WordPress wp-ultimate-exporter plugin cross-site request forgery vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-ultimate-exporter is a plugin that exports CSV files based on filtering criteria used in it. A cross-site request forgery...

CVE-2019-14427

XSS exists in WEB STUDIO Ultimate Loan Manager 2.0 by adding a branch under the Branches button that sets the notes parameter with crafted JavaScript code...

CVE-2019-14427

XSS exists in WEB STUDIO Ultimate Loan Manager 2.0 by adding a branch under the Branches button that sets the notes parameter with crafted JavaScript code...

Cross site scripting

XSS exists in WEB STUDIO Ultimate Loan Manager 2.0 by adding a branch under the Branches button that sets the notes parameter with crafted JavaScript code...

CVE-2019-14427

XSS exists in WEB STUDIO Ultimate Loan Manager 2.0 by adding a branch under the Branches button that sets the notes parameter with crafted JavaScript code...

CVE-2019-14427

CVE-2019-14427 describes an XSS vulnerability in WEB STUDIO Ultimate Loan Manager 2.0. The issue arises when an attacker injects crafted JavaScript by setting the notes parameter via the Branches workflow (branch/store, as noted in multiple sources). The vulnerability supports at least a persiste...

CVE-2018-20968

The wp-ultimate-exporter plugin before 1.4.2 for WordPress has CSRF...

Cross site request forgery (csrf)

The wp-ultimate-csv-importer plugin before 5.6.1 for WordPress has CSRF...

CVE-2018-20967

The wp-ultimate-csv-importer plugin before 5.6.1 for WordPress has CSRF...

CVE-2018-20967

The CVE-2018-20967 issue affects the WordPress plugin wp-ultimate-csv-importer prior to version 5.6.1, which is vulnerable to CSRF. Multiple sources (NVD, Red Hat, CNVD, OpenVAS, WPVulnDB, PT-2019-10403) confirm the affected software and the vulnerability class, with remediation guidance consiste...