CVE-2025-23772 WordPress imaGenius Plugin <= 1.7 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Eugenio Petulla’ imaGenius imagenius allows Stored XSS.This issue affects imaGenius: from n/a through = 1.7...

CVE-2025-23453

CVE-2025-23453 (Myriad Solutionz Stars SMTP Mailer) — Reflected XSS . Affected: Stars SMTP Mailer for WordPress (versions

WordPress Stars SMTP Mailer plugin <= 1.7 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Muhamad Agil Fachrian in WordPress Plugin Stars SMTP Mailer versions = 1.7...

WordPress plugin Easy Tweet Embed 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin imaGenius 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

PT-2025-5094 · WordPress · Wp Amaps

Name of the Vulnerable Software and Affected Versions: wp amaps versions n/a through 1.7 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows Stored XSS. This means an attacker can inject malicious...

PT-2025-5173 · Unknown · Easy Tweet Embed

Name of the Vulnerable Software and Affected Versions: Easy Tweet Embed versions 1.7 and earlier Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting'. This allows for DOM-Based XSS attacks. Recommendations: For...

WordPress plugin Torod 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2024-17153 · WordPress · Float Block Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: float block WordPress plugin versions 1.7 and earlier Description: The issue concerns the float block WordPress plugin, which does not properly sanitise and escape some of its settings. This could allow high privilege users, such as...

CVE-2024-11752 Eveeno <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Eveeno plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'eveeno' shortcode in all versions up to, and including, 1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, wi...

WordPress plugin Eveeno 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

CVE-2024-52464

CVE-2024-52464: Reflected XSS in WordPress plugin amr shortcodes (versions 1.7 and earlier). Root cause is improper input handling during web page generation, enabling an attacker-controlled input to be reflected in the output. Affected component: amr shortcodes. Impact: Reflected XSS risk on pag...

WordPress amr shortcodes plugin <= 1.7 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin amr shortcodes versions = 1.7...

WordPress plugin OS Our Team 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress OS Our Team Plugin <= 1.7 is vulnerable to Cross Site Scripting (XSS)

Software OS Our Team Type Plugin Vulnerable versions = 1.7 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52341 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5778f7cc0c55 Credits SOPROBRO Required privilege Contributor...

PT-2024-33385 · WordPress · Buddypress Better Registration

Name of the Vulnerable Software and Affected Versions: BuddyPress Better Registration versions 1.6 and earlier BuddyPress Better Registration version 1.7 is not affected, as it contains the fix for the issue. Description: The issue is an Authentication Bypass Using an Alternate Path or Channel...

DouCo DouPHP 代码问题漏洞

DouCo DouPHP is a lightweight enterprise content management system CMS from China DouCo Networks. A code issue vulnerability exists in DouCo DouPHP version 1.7 Release 20220822, which stems from a remote code execution vulnerability that can be exploited by an attacker with administrator privileg...

WordPress plugin WP Secure Maintenance security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

WordPress WP Secure Maintenance Plugin < 1.7 is vulnerable to Cross Site Scripting (XSS)

Software WP Secure Maintenance Type Plugin Vulnerable versions 1.7 Fixed in 1.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4753 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 0805b5b4df9d Credits Guido Iván García Duva...

WordPress plugin PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode security vulnerability

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in the WordPress plugin PayPal Pay Now, Buy Now, Donation...