CVE-2023-49176

CVE-2023-49176: WordPress WP Pocket URLs plugin <= 1.0.2 is vulnerable to Reflected XSS due to improper input neutralization during web page generation. Public details indicate unauthenticated exploitation via crafted inputs in URLs could lead to script execution in victims’ browsers. A fix wa...

CVE-2024-51681

CVE-2024-51681 – WP Pocket URLs (CodeRevolution) Vulnerability: Stored XSS due to Improper Neutralization of Input During Web Page Generation in WP Pocket URLs plugin (≤ 1.0.3). Affected software: WordPress WP Pocket URLs plugin versions up to 1.0.3. Root cause: Cross-site scripting caused by ins...