CVE-2020-36769

The Widget Settings Importer/Exporter Plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the wpajaximportwidgetdataparameter AJAX action in versions up to, and including, 1.5.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

PT-2023-11906 · WordPress · Widget Settings Importer/Exporter Plugin

Name of the Vulnerable Software and Affected Versions: The Widget Settings Importer/Exporter Plugin for WordPress versions up to, and including, 1.5.3 Description: The issue is related to Stored Cross-Site Scripting via the "wp ajax import widget data" parameter AJAX action due to insufficient...

WordPress plugin Widget Settings Importer/Exporter security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...