VYPR
← WordPress

Vendor CVEs

WordPress

All CVEs

40,235 total · sorted by risk
  • CVE-2023-41136MedNov 30, 2023
    Ohmybox
    Simple Long Form
    risk 0.38cvss 5.9epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Laurence/OhMyBox.Info Simple Long Form allows Stored XSS.This issue affects Simple Long Form: from n/a through 2.2.2.

  • CVE-2023-48743MedNov 30, 2023
    Codehooligans
    Simply Exclude
    risk 0.38cvss 5.8epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paul Menard Simply Exclude allows Reflected XSS.This issue affects Simply Exclude: from n/a through 2.0.6.6.

  • CVE-2023-48737MedNov 30, 2023
    Tripay
    Payment Gateway
    risk 0.38cvss 5.9epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PT Trijaya Digital Grup TriPay Payment Gateway allows Stored XSS.This issue affects TriPay Payment Gateway: from n/a through 3.2.7.

  • CVE-2023-4642MedNov 27, 2023
    WordPress
    Kk Star Ratings
    risk 0.38cvss 5.9epss 0.00

    The kk Star Ratings WordPress plugin before 5.4.6 does not implement atomic operations, allowing one user vote multiple times on a poll due to a Race Condition.

  • CVE-2023-47833MedNov 23, 2023
    WordPress
    Theater for WordPress
    risk 0.38cvss 5.9epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeroen Schmit Theater for WordPress plugin <= 0.18.3 versions.

  • CVE-2023-47829MedNov 22, 2023
    Codez
    Quick Call Button
    risk 0.38cvss 5.9epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codez Quick Call Button plugin <= 1.2.9 versions.

  • CVE-2023-47809MedNov 22, 2023
    Themepoints
    Accordion
    risk 0.38cvss 5.9epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themepoints Accordion plugin <= 2.6 versions.

  • CVE-2023-47759MedNov 22, 2023
    Premio
    Chaty
    risk 0.38cvss 5.9epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Premio Chaty chaty allows DOM-Based XSS.This issue affects Chaty: from n/a through <= 3.1.2.

  • CVE-2023-32957MedNov 16, 2023
    Dazzlersoft
    Team Members Showcase
    risk 0.38cvss 5.9epss 0.00

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Dazzlersoft Team Members Showcase plugin <= 1.3.4 versions.

  • CVE-2023-47511MedNov 16, 2023
    So Wp
    Pinyin Slugs
    risk 0.38cvss 5.9epss 0.00

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in SO WP Pinyin Slugs plugin <= 2.3.0 versions.

  • CVE-2023-47245MedNov 16, 2023
    Marco Milesi
    Anac XML Viewer
    risk 0.38cvss 5.9epss 0.00

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi ANAC XML Viewer plugin <= 1.7 versions.

  • CVE-2023-47532MedNov 14, 2023
    Themeum
    Wp Crowdfunding
    risk 0.38cvss 5.8epss 0.00

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Themeum WP Crowdfunding plugin <= 2.1.6 versions.

  • CVE-2023-47528MedNov 14, 2023
    Sajjad67
    Wp Edit Username
    risk 0.38cvss 5.9epss 0.00

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Sajjad Hossain Sagor WP Edit Username plugin <= 1.0.5 versions.

  • CVE-2023-47524MedNov 14, 2023
    Codebard
    Patron Button And Widgets For Patreon
    risk 0.38cvss 5.8epss 0.00

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability (requires PHP 8.x) in CodeBard CodeBard's Patron Button and Widgets for Patreon plugin <= 2.1.9 versions.

  • CVE-2023-47546MedNov 14, 2023
    Walter Pinem
    OneClick Chat to Order
    risk 0.38cvss 5.9epss 0.00

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Walter Pinem OneClick Chat to Order plugin <= 1.0.4.2 versions.

  • CVE-2023-47545MedNov 14, 2023
    Fatcatapps
    Forms For Mailchimp By Optin Cat
    risk 0.38cvss 5.9epss 0.00

    Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Fatcat Apps Forms for Mailchimp by Optin Cat – Grow Your MailChimp List plugin <= 2.5.4 versions.

  • CVE-2023-47533MedNov 14, 2023
    Wpdevart
    Countdown And Countup\, Woocommerce Sales Timer
    risk 0.38cvss 5.9epss 0.00

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in wpdevart Countdown and CountUp, WooCommerce Sales Timer plugin <= 1.8.2 versions.

  • CVE-2023-47646MedNov 14, 2023
    Cedcommerce
    Recently Viewed And Most Viewed Products
    risk 0.38cvss 5.9epss 0.00

    Auth. (Shop Manager+) Stored Cross-Site Scripting (XSS) vulnerability in CedCommerce Recently viewed and most viewed products plugin <= 1.1.1 versions.

  • CVE-2023-47554MedNov 14, 2023
    Denk
    Actueel Financieel Nieuws
    risk 0.38cvss 5.9epss 0.00

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in DenK BV Actueel Financieel Nieuws – Denk Internet Solutions plugin <= 5.1.0 versions.

  • CVE-2023-47658MedNov 14, 2023
    Actpro
    Extra Product Options For Woocommerce
    risk 0.38cvss 5.9epss 0.00

    Auth. (ShopManager+) Stored Cross-Site Scripting (XSS) vulnerability in actpro Extra Product Options for WooCommerce plugin <= 3.0.3 versions.

  • CVE-2023-47656MedNov 14, 2023
    Marco Milesi
    Anac XML Bandi Di Gara
    risk 0.38cvss 5.9epss 0.00

    Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi ANAC XML Bandi di Gara plugin <= 7.5 versions.

  • CVE-2023-47653MedNov 14, 2023
    Abu Bakar
    TWB Woocommerce Reviews
    risk 0.38cvss 5.9epss 0.00

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Abu Bakar TWB Woocommerce Reviews plugin <= 1.7.5 versions.

  • CVE-2023-47660MedNov 14, 2023
    Wpwham
    Product Visibility By Country For Woocommerce
    risk 0.38cvss 5.9epss 0.00

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP Wham Product Visibility by Country for WooCommerce plugin <= 1.4.9 versions.

  • CVE-2023-47662MedNov 14, 2023
    WordPress
    Live Gold Price & Silver Price Charts Widgets
    risk 0.38cvss 5.9epss 0.00

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in GoldBroker.Com Live Gold Price & Silver Price Charts Widgets plugin <= 2.4 versions.

  • CVE-2023-47657MedNov 14, 2023
    WordPress
    Direct Checkout – Quick View – Buy Now For WooCommerce
    risk 0.38cvss 5.9epss 0.00

    Auth. (ShopManager+) Stored Cross-Site Scripting (XSS) vulnerability in GrandPlugins Direct Checkout – Quick View – Buy Now For WooCommerce plugin <= 1.5.8 versions.

  • CVE-2023-47228MedNov 8, 2023
    Web Settler
    Layer Slider
    risk 0.38cvss 5.9epss 0.00

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Muneeb Layer Slider plugin <= 1.1.9.7 versions.

  • CVE-2023-47227MedNov 8, 2023
    WordPress
    Social Feed | All social media in one place
    risk 0.38cvss 5.9epss 0.00

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Web-Settler Social Feed | All social media in one place plugin <= 1.5.4.6 versions.

  • CVE-2023-47226MedNov 8, 2023
    I Thirteen Web Solution
    Post Sliders & Post Grids
    risk 0.38cvss 5.9epss 0.00

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Post Sliders & Post Grids plugin <= 1.0.20 versions.

  • CVE-2023-47223MedNov 8, 2023
    Wpmapplugins
    Basic Interactive World Map
    risk 0.38cvss 5.9epss 0.00

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP Map Plugins Basic Interactive World Map plugin <= 2.0 versions.

  • CVE-2023-47181MedNov 8, 2023
    Northernbeacheswebsites
    Ideapush
    risk 0.38cvss 5.9epss 0.00

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Martin Gibson IdeaPush plugin <= 8.52 versions.

  • CVE-2023-46642MedNov 8, 2023
    WordPress
    SAHU TikTok Pixel for E-Commerce
    risk 0.38cvss 5.9epss 0.00

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in sahumedia SAHU TikTok Pixel for E-Commerce plugin <= 1.2.2 versions.

  • CVE-2022-44738MedNov 7, 2023
    Patrickrobrecht
    Posts And Users Stats
    risk 0.38cvss 5.8epss 0.01

    Improper Neutralization of Formula Elements in a CSV File vulnerability in Patrick Robrecht Posts and Users Stats.This issue affects Posts and Users Stats: from n/a through 1.1.3.

  • CVE-2022-42882MedNov 7, 2023
    WordPress
    Simple CSV/XLS Exporter
    risk 0.38cvss 5.8epss 0.01

    Improper Neutralization of Formula Elements in a CSV File vulnerability in Shambix Simple CSV/XLS Exporter.This issue affects Simple CSV/XLS Exporter: from n/a through 1.5.8.

  • CVE-2022-38702MedNov 7, 2023
    Kigurumi
    CSV Exporter
    risk 0.38cvss 5.8epss 0.01

    Improper Neutralization of Formula Elements in a CSV File vulnerability in Nakashima Masahiro WP CSV Exporter.This issue affects WP CSV Exporter: from n/a through 2.0.

  • CVE-2022-46821MedNov 7, 2023
    Jackmail
    Jackmail
    risk 0.38cvss 5.8epss 0.01

    Improper Neutralization of Formula Elements in a CSV File vulnerability in Jackmail & Sarbacane Emails & Newsletters with Jackmail.This issue affects Emails & Newsletters with Jackmail: from n/a through 1.2.22.

  • CVE-2022-46804MedNov 7, 2023
    Narola Infotech Solutions LLP
    Export Users Data Distinct
    risk 0.38cvss 5.8epss 0.01

    Improper Neutralization of Formula Elements in a CSV File vulnerability in Narola Infotech Solutions LLP Export Users Data Distinct.This issue affects Export Users Data Distinct: from n/a through 1.3.

  • CVE-2022-45348MedNov 7, 2023
    Anmari
    Amr Users
    risk 0.38cvss 5.8epss 0.01

    Improper Neutralization of Formula Elements in a CSV File vulnerability in anmari amr users.This issue affects amr users: from n/a through 4.59.4.

  • CVE-2022-45078MedNov 7, 2023
    Solwininfotech
    User Blocker
    risk 0.38cvss 5.9epss 0.01

    Improper Neutralization of Formula Elements in a CSV File vulnerability in Solwin Infotech User Blocker.This issue affects User Blocker: from n/a through 1.5.5.

  • CVE-2022-47442MedNov 7, 2023
    Ayecode
    Userswp
    risk 0.38cvss 5.8epss 0.01

    Improper Neutralization of Formula Elements in a CSV File vulnerability in AyeCode Ltd UsersWP.This issue affects UsersWP: from n/a through 1.2.3.9.

  • CVE-2023-47184MedNov 6, 2023
    WordPress
    Admin Bar & Dashboard Access Control
    risk 0.38cvss 5.9epss 0.00

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Proper Fraction LLC. Admin Bar & Dashboard Access Control plugin <= 1.2.8 versions.

  • CVE-2023-46824MedNov 6, 2023
    Omaksolutions
    Slick Popup
    risk 0.38cvss 5.9epss 0.00

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Om Ak Solutions Slick Popup: Contact Form 7 Popup Plugin plugin <= 1.7.14 versions.

  • CVE-2023-23702MedNov 6, 2023
    Pixelgrade
    Comments Rating
    risk 0.38cvss 5.9epss 0.00

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Pixelgrade Comments Ratings plugin <= 1.1.7 versions.

  • CVE-2023-40681MedOct 31, 2023
    Groundhogg
    Groundhogg
    risk 0.38cvss 5.9epss 0.00

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Groundhogg Inc. Groundhogg plugin <= 2.7.11.10 versions.

  • CVE-2023-46210MedOct 31, 2023
    Webcource
    Wc Captcha
    risk 0.38cvss 5.9epss 0.00

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WebCource WC Captcha plugin <= 1.4 versions.

  • CVE-2023-46200MedOct 27, 2023
    Wandlesoftware
    Smart App Banner
    risk 0.38cvss 5.9epss 0.00

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Stephen Darlington, Wandle Software Limited Smart App Banner plugin <= 1.1.3 versions.

  • CVE-2023-32738MedOct 27, 2023
    Xtendify
    Eonet Manual User Approve
    risk 0.38cvss 5.9epss 0.00

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Alkaweb Eonet Manual User Approve plugin <= 2.1.3 versions.

  • CVE-2023-46199MedOct 27, 2023
    Triberr
    Triberr
    risk 0.38cvss 5.9epss 0.00

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Triberr plugin <= 4.1.1 versions.

  • CVE-2023-46194MedOct 27, 2023
    Eric Teubert
    Archivist – Custom Archive Templates
    risk 0.38cvss 5.8epss 0.00

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Eric Teubert Archivist – Custom Archive Templates plugin <= 1.7.5 versions.

  • CVE-2023-46192MedOct 27, 2023
    Internetmarketingninjas
    Internal Link Building
    risk 0.38cvss 5.9epss 0.00

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Internet Marketing Ninjas Internal Link Building plugin <= 1.2.3 versions.

  • CVE-2023-46093MedOct 27, 2023
    Lionscripts
    Webmaster Tools
    risk 0.38cvss 5.9epss 0.00

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in LionScripts.Com Webmaster Tools plugin <= 2.0 versions.

Page 474 of 805