CVE-2017-18529

The CVE-2017-18529 entry concerns the WordPress promobar plugin (before 1.1.1) with multiple XSS issues. Nuclei and vendor data confirm affected software: promobar plugin for WordPress,

CVE-2017-2171

CVE-2017-2171 detail: A cross-site scripting vulnerability affects BestWebSoft WordPress plugins that display the BestWebSoft menu. The issue arises from a common function used to render the menu (CWE-79), enabling remote attackers to execute arbitrary script in a logged-in user’s browser. Affect...