WordPress WP-Clap plugin <= 1.5 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin WP-Clap versions = 1.5...

PT-2025-4875 · Oren Yomtov · Mass Custom Fields Manager

Name of the Vulnerable Software and Affected Versions: Oren Yomtov Mass Custom Fields Manager versions 1.5 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Reflected XSS. This means an attacker can trick a user into performing unintended actions on...

WordPress plugin Mass Custom Fields Manager 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

WordPress plugin Add RSS 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

PT-2025-5178 · Add Rss · Add Rss

Name of the Vulnerable Software and Affected Versions: Add RSS versions n/a through 1.5 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application,...

WordPress Multilang Contact Form Plugin <= 1.5 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Multilang Contact Form versions = 1.5...

CVE-2025-22517

CVE-2025-22517 is about a Stored XSS in the WordPress plugin/List Pages at Depth. The initial description confirms improper neutralization of input during web page generation leading to Stored XSS on List Pages at Depth versions up to 1.5. The CVSS 3.1 base/impact data given is AV:N/AC:L/PR:L/UI:...

WordPress List Pages at Depth plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin List Pages at Depth versions = 1.5...

WordPress plugin WP FullCalendar 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

WordPress WP FullCalendar plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin WP FullCalendar versions = 1.5...

WordPress Outdooractive Embed plugin <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zaim in WordPress Plugin Outdooractive Embed versions = 1.5...

QNAP Systems QuLog Center 跨站脚本漏洞

QNAP Systems QuLog Center is a report field at China Weilian Technology QNAP Systems that logs events reported by the system. A cross-site scripting vulnerability exists in QNAP Systems QuLog Center versions 1.5, 1.4, and 1.3 that originates from a vulnerability that could allow a remote attacker...

CVE-2024-54262

Unrestricted Upload of File with Dangerous Type vulnerability in sidngr Import Export For WooCommerce import-export-for-woocommerce allows Upload a Web Shell to a Web Server.This issue affects Import Export For WooCommerce: from n/a through = 1.6.2...

WordPress plugin Bulk NoIndex & NoFollow Toolkit 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress...

PT-2024-36230 · Skt Themes · Skt Themes Bicycleshop

Name of the Vulnerable Software and Affected Versions: SKT Themes Bicycleshop versions 1.5 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows DOM-Based XSS. This means that an attacker could potentially inject malicious scrip...

PT-2024-36120 · Unknown · Elite Notification – Sales Popup

Name of the Vulnerable Software and Affected Versions: Elite Notification – Sales Popup, Social Proof, FOMO & WooCommerce Notification versions 1.5 through n/a Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation due to incorrectly configured acces...

WordPress plugin Bicycleshop 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin Import Export For WooCommerce 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in WordPress...

PT-2024-17593 · WordPress · Bp Email Assign Templates

Name of the Vulnerable Software and Affected Versions: BP Email Assign Templates plugin for WordPress versions up to and including 1.5 Description: The issue arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary web scripts in page...

WordPress Bicycleshop theme <= 1.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Theme Bicycleshop versions = 1.5...