Lucene search
+L
PatchstackMost viewed

47982 matches found

Patchstack
Patchstack
•added 2021/09/15 12:0 a.m.•26 views

WordPress Compact WP Audio Player plugin <= 1.9.6 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability discovered by apple502j in WordPress Compact WP Audio Player plugin versions = 1.9.6. Solution Update the WordPress Compact WP Audio Player plugin to the latest available version at least 1.9.7...

6.5CVSS3.5AI score0.00553EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
•added 2021/09/09 12:0 a.m.•26 views

WordPress On Page SEO + Whatsapp Chat Button plugin <= 1.0.1 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by p7e4 in WordPress On Page SEO + Whatsapp Chat Button plugin versions = 1.0.1. Solution Update the WordPress On Page SEO + Whatsapp Chat Button plugin to the latest available version at least 1.0.2...

6.1CVSS1.7AI score0.00895EPSS
SaveExploits1References3Affected Software1
Patchstack
Patchstack
•added 2021/08/13 12:0 a.m.•26 views

WordPress 2Way VideoCalls and Random Chat – HTML5 Webcam Videochat plugin <= 5.2.7 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by p7e4 in WordPress 2Way VideoCalls and Random Chat – HTML5 Webcam Videochat plugin versions = 5.2.7. Solution Update WordPress 2Way VideoCalls and Random Chat – HTML5 Webcam Videochat plugin to the latest available version at least 5.2...

6.1CVSS2.1AI score0.00895EPSS
SaveExploits1References3Affected Software1
Patchstack
Patchstack
•added 2021/07/30 12:0 a.m.•26 views

WordPress Absolutely Glamorous Custom Admin plugin <= 6.8 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Jörgson Patchstack Red Team in WordPress Absolutely Glamorous Custom Admin plugin versions = 6.8. Solution Update the WordPress Absolutely Glamorous Custom Admin plugin to the latest available version at least 6.9, addition...

8.2CVSS1.6AI score0.00741EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
•added 2021/07/26 12:0 a.m.•26 views

WordPress GiveWP plugin <= 2.11.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Asif Nawaz Minhas in WordPress GiveWP plugin versions = 2.11.3. Solution Update the WordPress GiveWP plugin to the latest available version at least 2.12.0...

4.8CVSS1.8AI score0.00617EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
•added 2021/07/21 12:0 a.m.•26 views

WordPress Maintenance plugin <= 4.02 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Emil Kylander in WordPress Maintenance plugin versions = 4.02. Solution Update the WordPress Maintenance plugin to the latest available version at least 4.03...

4.8CVSS2.3AI score0.00617EPSS
SaveExploits2References4Affected Software1
Patchstack
Patchstack
•added 2021/07/02 12:0 a.m.•26 views

WordPress Workreap premium theme <= 2.2.1 - Multiple Cross-Site Scripting (CSRF) + Insecure Direct Object References (IDOR) vulnerabilities

Multiple Cross-Site Scripting CSRF + Insecure Direct Object References IDOR vulnerabilities discovered by Harald Eilertsen Jetpack in WordPress Workreap premium theme versions = 2.2.1. Solution Update the WordPress Workreap premium theme to the latest available version at least 2.2.2...

8.1CVSS1.1AI score0.00646EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
•added 2021/06/29 12:0 a.m.•26 views

WordPress Popup Like box plugin <= 3.5.2 - Authenticated Blind SQL Injection (SQLi) vulnerability

Authenticated Blind SQL Injection SQLi vulnerability discovered by To Quang Duong in WordPress Popup Like box plugin versions = 3.5.2. Solution Update the WordPress Popup Like box plugin to the latest available version at least 3.5.3...

8.8CVSS2.5AI score0.01362EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
•added 2021/06/29 12:0 a.m.•26 views

WordPress Survey Maker plugin <= 1.5.5 - Authenticated Blind SQL Injection (SQLi) vulnerability

Authenticated Blind SQL Injection SQLi vulnerability discovered by To Quang Duong in WordPress Survey Maker plugin versions = 1.5.5. Solution Update the WordPress Survey Maker plugin to the latest available version at least 1.5.6...

8.8CVSS3AI score0.01362EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
•added 2021/06/28 12:0 a.m.•26 views

WordPress ProfilePress plugin <= 3.1.7 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Vaibhav Koli in WordPress ProfilePress plugin versions = 3.1.7. Solution Update the WordPress ProfilePress plugin to the latest available version at least 3.1.8...

4.8CVSS1.6AI score0.00652EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
•added 2021/06/18 12:0 a.m.•26 views

WordPress Admin Columns plugin <= 4.3.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Johannes Lauinger in WordPress Admin Columns plugin versions = 4.3.1. Solution Update the WordPress Admin Columns plugin to the latest available version at least 4.3.2...

5.4CVSS2.3AI score0.00932EPSS
SaveExploits4References3Affected Software1
Patchstack
Patchstack
•added 2021/06/09 12:0 a.m.•26 views

WordPress Advanced AJAX Product Filters plugin <= 1.5.4.6 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability discovered by dc11 in WordPress Advanced AJAX Product Filters plugin versions = 1.5.4.6. Solution Update the WordPress Advanced AJAX Product Filters plugin to the latest available version at least 1.5.4.7...

2.6AI score0.00449EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
•added 2021/05/31 12:0 a.m.•26 views

WordPress Quiz And Survey Master plugin <= 7.1.17 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by renniepak in WordPress Quiz And Survey Master plugin versions = 7.1.17. Solution Update the WordPress Quiz And Survey Master plugin to the latest available version at least 7.1.18...

6.1CVSS2.2AI score0.00827EPSS
SaveExploits2References2Affected Software1
Patchstack
Patchstack
•added 2021/05/05 12:0 a.m.•26 views

WordPress Hana Flv Player plugin <= 3.1.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Kishore Hariram in WordPress Hana Flv Player plugin versions = 3.1.3. Solution No patched version is available. The last version was released 8 years ago...

5.4CVSS0.9AI score0.0062EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
•added 2021/04/19 12:0 a.m.•26 views

WordPress Popup by Supsystic plugin <= 1.10.4 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by 0xB9 in WordPress Popup by Supsystic plugin versions = 1.10.4. Solution Update the WordPress Popup by Supsystic plugin to the latest available version at least 1.10.5...

6.1CVSS2AI score0.18165EPSS
SaveExploits5References3Affected Software1
Patchstack
Patchstack
•added 2021/04/10 12:0 a.m.•26 views

WordPress Imagements plugin <= 1.2.5 - Unauthenticated Arbitrary File Upload leading to Remote Code Execution (RCE) vulnerability

Unauthenticated Arbitrary File Upload leading to Remote Code Execution RCE vulnerability discovered by Jin Huang in WordPress Imagements plugin versions = 1.2.5. Solution Plugin closed. Deactivate and delete...

9.8CVSS4.3AI score0.0714EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
•added 2021/04/10 12:0 a.m.•26 views

WordPress Event Banner plugin <= 1.3 - Arbitrary File Upload vulnerability leading to Remote Code Execution (RCE)

Arbitrary File Upload vulnerability leading to Remote Code Execution RCE discovered by Jin Huang in WordPress Event Banner plugin versions = 1.3. Solution This plugin has been closed as of December 24, 2018 and is not available for download. Reason: Guideline Violation...

7.2CVSS4AI score0.01678EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
•added 2021/04/07 12:0 a.m.•26 views

WordPress OpenID Connect Generic Client plugin <= 3.8.1 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Austin Bentley in WordPress OpenID Connect Generic Client plugin versions = 3.8.1. Solution Update the WordPress OpenID Connect Generic Client plugin to the latest available version at least 3.8.2...

6.1CVSS2.3AI score0.0163EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
•added 2021/03/21 12:0 a.m.•26 views

WordPress Bello - Directory & Listing premium theme <= 1.5.9 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability discovered by m0ze Patchstack Red Team in WordPress Bello - Directory & Listing premium theme versions = 1.5.9. Solution Update the WordPress Bello - Directory & Listing premium theme to the latest available version at least 1.6.0...

6.1CVSS2.4AI score0.10769EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
•added 2021/02/10 12:0 a.m.•26 views

WordPress Responsive Menu plugin <= 4.0.3 - Cross-Site Request Forgery (CSRF) leading to Setting Modification vulnerability

Cross-Site Request Forgery CSRF leading to Setting Modification vulnerability found by WordFence in WordPress Responsive Menu plugin versions = 4.0.3. Solution Update the WordPress Responsive Menu plugin to the latest available version at least 4.0.4...

3.5AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2020/12/09 12:0 a.m.•26 views

WordPress DiveBook plugin <= 1.1.4 - Improper Authorisation Check vulnerability

Improper Authorisation Check vulnerability found by Hooper Labs in WordPress DiveBook plugin versions = 1.1.4. Solution 2020-12-09 - we were unable to find a patched version of this plugin Last updated: 10 years ago...

5.3CVSS2.9AI score0.01139EPSS
SaveExploits1References2Affected Software1
Patchstack
Patchstack
•added 2020/11/06 12:0 a.m.•26 views

WordPress WooCommerce Blocks plugin <= 3.7.0 - Guest Account Creation vulnerability

Guest Account Creation vulnerability found in WordPress WooCommerce Blocks plugin versions = 3.7.0. Solution Update the WordPress WooCommerce Blocks plugin to the latest available version at least 3.7.1...

3.6AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2020/10/01 12:0 a.m.•26 views

WordPress Activello theme <= 1.4.1 - Unauthenticated Function Injection vulnerability

Unauthenticated Function Injection vulnerability found by Jerome Bruandet NinTechNet in WordPress Activello theme versions = 1.4.1. Solution Update the WordPress Activello theme to the latest available version at least 1.4.2...

3.8AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2020/07/29 12:0 a.m.•26 views

WordPress Coming Soon Page, Under Construction & Maintenance Mode by SeedProd plugin <= 5.1.0 - Persistent Cross-Site Scripting (XSS) vulnerability

Persistent Cross-Site Scripting XSS vulnerability found by Jinson Varghese Behanan in WordPress Coming Soon Page, Under Construction & Maintenance Mode by SeedProd plugin versions = 5.1.0. Solution Update the WordPress Coming Soon Page, Under Construction & Maintenance Mode by SeedProd plugin to...

5.4CVSS2.1AI score0.03757EPSS
SaveExploits5References1Affected Software1
Patchstack
Patchstack
•added 2020/07/09 12:0 a.m.•26 views

WordPress KingComposer plugin <= 2.9.4 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by WordFence in WordPress KingComposer plugin versions = 2.9.4. Solution Update the WordPress KingComposer plugin to the latest available version at least 2.9.5...

6.1CVSS1.9AI score0.4696EPSS
SaveExploits1References3Affected Software1
Patchstack
Patchstack
•added 2020/04/20 12:0 a.m.•26 views

WordPress Advanced Access Manager plugin <= 6.6.1 - Authenticated Authorization Bypass and Privilege Escalation vulnerability

Authenticated Authorization Bypass and Privilege Escalation vulnerability discovered by WordFence in WordPress Advanced Access Manager plugin versions = 6.6.1. Solution Update the WordPress Advanced Access Manager plugin to the latest available version at least 6.6.2...

8.8CVSS4.8AI score0.01463EPSS
SaveExploits1References3Affected Software1
Patchstack
Patchstack
•added 2020/04/13 12:0 a.m.•26 views

WordPress Media Library Assistant plugin <= 2.81 - Unauthenticated Limited Local File Inclusion (LFI) vulnerability

Unauthenticated Limited Local File Inclusion LFI vulnerability discovered by Daniel Monzón stark0de in WordPress Media Library Assistant plugin versions = 2.81. Solution Update the WordPress Media Library Assistant plugin to the latest available version at least 2.82...

7.5CVSS4.1AI score0.04917EPSS
SaveExploits4References3Affected Software1
Patchstack
Patchstack
•added 2020/02/25 12:0 a.m.•26 views

WordPress Envira Photo Gallery plugin <= 1.7.6 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Fortinet in WordPress Envira Photo Gallery plugin versions = 1.7.6. Solution Update the WordPress Envira Photo Gallery plugin to the latest available version at least 1.7.7...

5.4CVSS2.8AI score0.00778EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
•added 2019/12/02 12:0 a.m.•26 views

WordPress Mesmerize theme <=1.6.89 - Authenticated Options Update vulnerability

Authenticated Options Update vulnerability found by NinTechNet in WordPress Mesmerize theme versions =1.6.89. Solution Update the WordPress Mesmerize theme to the latest available version at least 1.6.90...

3.5AI score
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2019/10/31 12:0 a.m.•26 views

WordPress YITH Custom Thank You Page for Woocommerce plugin <=1.1.7 - Authenticated Settings Change (YITH Plugin Framework <=3.3.8) vulnerability

Authenticated Settings Change YITH Plugin Framework =3.3.8 vulnerability found by Jerome Bruandet in WordPress YITH Custom Thank You Page for Woocommerce plugin versions =1.1.7. Solution Update the WordPress YITH Custom Thank You Page for Woocommerce plugin to the latest available version at leas...

4.3CVSS2.9AI score0.00948EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2019/09/09 12:0 a.m.•26 views

WordPress LifterLMS plugin <= 3.34.5 - Unauthenticated Options Import vulnerability

Unauthenticated Options Import vulnerability found by Jerome Bruandet Nintechnet in WordPress LifterLMS plugin versions = 3.34.5. Solution Update the WordPress LifterLMS plugin to the latest available version at least 3.35.1...

9.8CVSS3.3AI score0.07453EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
•added 2019/08/29 12:0 a.m.•26 views

WordPress HandL UTM Grabber plugin <= 2.6.4 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability found in WordPress HandL UTM Grabber plugin versions = 2.6.4. Solution Update the WordPress HandL UTM Grabber plugin to the latest available version at least 2.6.5...

8.8CVSS2.1AI score0.00799EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2019/07/19 12:0 a.m.•26 views

WordPress Everest Forms plugin <= 1.4.9 - SQL Injection (SQLi) vulnerability

SQL Injection SQLi vulnerability found by Tin Duong in WordPress Everest Forms plugin versions = 1.4.9. Solution Update the WordPress Everest Forms plugin to the latest available version at least 1.5.0...

9.8CVSS3AI score0.02581EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2019/07/13 12:0 a.m.•26 views

WordPress Hybrid Composer plugin <= 1.4.6 - Unauthenticated Options Update vulnerability

Unauthenticated Options Update vulnerability found by rootetsy in WordPress Hybrid Composer plugin versions = 1.4.6. Solution Update the WordPress Hybrid Composer plugin to the latest available version at least 1.4.7...

2.4AI score
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2019/05/25 12:0 a.m.•26 views

WordPress Form Maker by 10Web plugin <= 1.13.2 - Authenticated SQL Injection (SQLi) vulnerability

Authenticated SQL Injection SQLi vulnerability found by Daniele Scanu in WordPress Form Maker by 10Web plugin versions = 1.13.20. Solution Update the WordPress Form Maker by 10Web plugin to the latest available version at least 1.13.3...

9.8CVSS3.1AI score0.06214EPSS
SaveExploits6References1Affected Software1
Patchstack
Patchstack
•added 2019/05/22 12:0 a.m.•26 views

WordPress WP Booking System <= 1.5.1.1 - CSRF vulnerability to Authenticated SQL Injection vulnerability

CSRF vulnerability to Authenticated SQL Injection vulnerability possible in WordPress WP Booking System versions = 1.5.1.1 found by Magnus K. Stubman. Solution Update the WordPress WP Booking System to the latest available version at least 1.5.2...

7.2CVSS3.1AI score0.00911EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
•added 2019/04/11 12:0 a.m.•26 views

WordPress Ninja Forms File Uploads Extension premium plugin <= 3.0.22 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by Jasper Weijts Onvio in WordPress Ninja Forms File Uploads Extension premium plugin versions = 3.0.22. Solution Update the WordPress Ninja Forms File Uploads Extension premium plugin to the latest available version at least 3.0.23...

8.1CVSS3.3AI score0.13018EPSS
SaveExploits1References3Affected Software1
Patchstack
Patchstack
•added 2019/04/04 12:0 a.m.•26 views

WordPress Ultimate Member plugin <= 2.0.39 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability found by Georg Knabl in WordPress Ultimate Member plugin versions = 2.0.39. Solution Update the WordPress Ultimate Member plugin to the latest available version at least 2.0.40...

9.3CVSS3.3AI score0.01816EPSS
SaveExploits3References1Affected Software1
Patchstack
Patchstack
•added 2019/03/22 12:0 a.m.•26 views

WordPress WP Live Chat Support plugin <= 8.0.17 - Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability found by Tim Coen in WordPress WP Live Chat Support plugin versions = 8.0.17. Solution Update the WordPress WP Live Chat Support plugin to the latest available version at least 8.0.18...

6.1CVSS1.2AI score0.01377EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
•added 2019/03/13 12:0 a.m.•26 views

WordPress Smart Forms plugin <= 2.5.15 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability found by Toshiharu Sugiyama in WordPress Smart Forms plugin versions = 2.5.15. Solution Update the WordPress Smart Forms plugin to the latest available version at least 2.6.16...

8.8CVSS2.9AI score0.0116EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2019/01/28 12:0 a.m.•26 views

WordPress Yet Another Stars Rating plugin <= 1.8.6 - PHP Object Injection vulnerability

PHP Object Injection vulnerability found by Paul Dannewitz in WordPress Yet Another Stars Rating plugin versions = 1.8.6. Solution Update the WordPress Yet Another Stars Rating plugin to the latest available version at least 1.8.7...

3.2AI score
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2018/05/30 12:0 a.m.•26 views

WordPress wpForo Forum plugin <=1.4.9 - Unauthenticated SQL Injection (SQLi) vulnerability

Unauthenticated SQL Injection via a search with the /forum/ wpfo parameter found by cate4cafe in WordPress wpForo Forum plugin versions =1.4.9. Solution Update the WordPress wpForo Forum plugin to the latest available version at least 1.4.11...

9.8CVSS4.2AI score0.0165EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack
•added 2018/04/29 12:0 a.m.•26 views

WordPress Cookie Consent plugin <=2.3.9 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability found in WordPress Cookie Consent plugin versions =2.3.9. Solution Update the WordPress Cookie Consent plugin to the latest available version at least 2.3.10...

5.4CVSS2.3AI score0.03892EPSS
SaveExploits5References1Affected Software1
Patchstack
Patchstack
•added 2018/01/09 12:0 a.m.•26 views

WordPress GD Rating System plugin 2.3 - Directory Traversal vulnerability (2)

A second Directory Traversal vulnerability found by d4wner in WordPress GD Rating System plugin version 2.3. Directory Traversal in the wp-admin/admin.php panel parameter for the gd-rating-system-information page. Solution 1/9/2018 - we were unable to find a patched version of this plugin...

7.5CVSS2.9AI score0.03699EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
•added 2018/01/09 12:0 a.m.•26 views

WordPress GD Rating System plugin 2.3 - Cross-Site Scripting (XSS) vulnerability (2)

A second Cross-Site Scripting XSS vulnerability found by d4wner in WordPress GD Rating System plugin version 2.3 Solution 1/9/2018 - we were unable to find a patched version of this plugin...

6.1CVSS1.9AI score0.01432EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
•added 2018/01/09 12:0 a.m.•26 views

WordPress ImageInject plugin 1.15 - Stored Cross-Site Scripting vulnerability

Stored Cross-Site Scripting vulnerability found by wpl0v3r in WordPress ImageInject plugin version 1.15. Vulnerable via the flickrappid parameter to wp-admin/options-general.php. Solution 1/9/2018 - we were unable to find a patched version of the plugin. Dangerous to use...

4.8CVSS2.9AI score0.00799EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
•added 2018/01/08 12:0 a.m.•26 views

WordPress Affiliate Ads for Clickbank Products plugin <= 1.6 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability found by Neorichi in WordPress Affiliate Ads for Clickbank Products plugin versions = 1.6. It is vulnerable to a Cross-Site Scripting XSS vulnerability via the textadsajax.php bordercolor parameter. Solution Update the WordPress Affiliate Ads for...

6.1CVSS3.1AI score0.01561EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
•added 2016/07/20 12:0 a.m.•26 views

WordPress Heat Trackr Plugin <= 1.0 - Reflected XSS

This plugin is prone to a cross site scripting vulnerability via /heat-trackr/heat-trackrabtestadd.php file. Solution Update the plugin...

6.1CVSS1.8AI score0.03415EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
•added 2016/07/20 12:0 a.m.•26 views

WordPress Indexisto Plugin <= 1.0.5 - Reflected XSS

This plugin is prone to a cross site scripting vulnerability. Solution Upgrade the plugin...

6.1CVSS1.9AI score0.03432EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack
•added 2016/04/13 12:0 a.m.•26 views

WordPress Pondol Form to Mail Plugin <= 1.1 - Cross Site Scripting (XSS)

Because of this vulnerability, the variable itemid appears to send unsanitized data back to the users browser. Vulnerable file is pondol-formmail/pages/admin-mail-info.php. Solution Update the plugin...

6.1CVSS3.4AI score0.03462EPSS
SaveExploits1References2Affected Software1
Total number of security vulnerabilities5000