CVE-2018-20970

The CVE-2018-20970 entry concerns the WordPress plugin pdf-print (before 2.0.3). The connected documents confirm multiple cross-site scripting (XSS) vulnerabilities in this plugin, affecting versions prior to 2.0.3 (e.g.,

CVE-2017-18528

CVE-2017-18528 corresponds to a vulnerability in the WordPress pdf-print plugin prior to version 1.9.4, described in the connected nuclei template as multiple XSS issues. Affected software: pdf-print plugin for WordPress (before 1.9.4). Impact: authenticated attackers can execute arbitrary JavaSc...

CVE-2017-2171

CVE-2017-2171 detail: A cross-site scripting vulnerability affects BestWebSoft WordPress plugins that display the BestWebSoft menu. The issue arises from a common function used to render the menu (CWE-79), enabling remote attackers to execute arbitrary script in a logged-in user’s browser. Affect...