Lucene search

Wp Docs Security Vulnerabilities - November

cve

CVE-2022-44736

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Chameleon plugin <= 1.4.3 on WordPress.

4.8CVSS

4.8AI Score

0.001EPSS

2022-11-17 11:15 PM

cve

CVE-2023-32106

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Fahad Mahmood WP Docs plugin <= 1.9.9 versions.

7.1CVSS

5.9AI Score

0.001EPSS

2023-08-18 02:15 PM

cve

CVE-2024-31294

Missing Authorization vulnerability in Fahad Mahmood WP Sort Order.This issue affects WP Sort Order: from n/a through 1.3.1.

4.3CVSS

4.7AI Score

0.0004EPSS

2024-06-09 09:15 AM

cve

CVE-2024-32690

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fahad Mahmood RSS Feed Widget allows Stored XSS.This issue affects RSS Feed Widget: from n/a through 2.9.7.

5.9CVSS

6.6AI Score

0.0004EPSS

2024-04-22 08:15 AM

cve

CVE-2024-35695

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Fahad Mahmood WP Docs allows Stored XSS.This issue affects WP Docs: from n/a through 2.1.3.

6.5CVSS

6.5AI Score

0.0004EPSS

2024-06-08 03:15 PM

cve

CVE-2024-35696

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Fahad Mahmood WP Docs allows Reflected XSS.This issue affects WP Docs: from n/a through 2.1.3.

7.1CVSS

7AI Score

0.0004EPSS

2024-06-08 03:15 PM