2 matches found
CVE-2015-9411
The Postmatic plugin before 1.4.6 for WordPress has XSS.
CVE-2022-4265
The Replyable WordPress plugin before 2.2.10 does not validate the class name submitted by the request when instantiating an object in the prompt_dismiss_notice action and also lacks CSRF check in the related action. This could allow any authenticated users, such as subscriber to perform Object Inj...