WordPress Password Protected cross-site scripting vulnerability

WordPress Password Protected versions 2.8.4 and earlier contain a cross-site scripting vulnerability. This flaw stems from insufficient input sanitization and output escaping of the purchasedplan parameter within the bundled Freemius SDK purchase completion handler. Additionally, no authorization...

WordPress Password Protected – Protect Your Site Content With a Password plugin <= 2.8.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by daroo in WordPress Plugin Password Protected versions = 2.8.4...

WordPress Password Protected Plugin <= 2.6.2 is vulnerable to Cross Site Scripting (XSS)

Software Password Protected Type Plugin Vulnerable versions = 2.6.2 Fixed in 2.6.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-32580 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID a80c60dc1bba Credits Mika Required...