Vendor CVEs

WordPress

All CVEs

40,234 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2023-41860	TravelMap Travelmap	Med	0.38	5.8	0.00	Sep 27, 2023	Unauth. Cross-Site Scripting (XSS) vulnerability in TravelMap plugin <= 1.0.1 versions.
CVE-2023-41242	Creativehassan Snap Pixel	Med	0.38	5.9	0.00	Sep 27, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Hassan Ali Snap Pixel plugin <= 1.5.7 versions.
CVE-2023-41241	Surecart Surecart	Med	0.38	5.9	0.00	Sep 27, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in SureCart WordPress Ecommerce For Creating Fast Online Stores plugin <= 2.5.0 versions.
CVE-2023-40677	Gopiplus Vertical Marquee	Med	0.38	5.9	0.00	Sep 27, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Vertical marquee plugin <= 7.1 versions.
CVE-2023-40676	Veronalabs Slimstat Analytics	Med	0.38	5.9	0.00	Sep 27, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Jason Crouse, VeronaLabs Slimstat Analytics plugin <= 5.0.8 versions.
CVE-2023-40675	Pluginops Landing Page Builder	Med	0.38	5.9	0.00	Sep 27, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PluginOps Landing Page Builder plugin <= 1.5.1.2 versions.
CVE-2023-40668	Pdfcrowd Save As PDF	Med	0.38	5.9	0.00	Sep 27, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Pdfcrowd Save as PDF plugin by Pdfcrowd plugin <= 2.16.0 versions.
CVE-2023-40665	Pdfcrowd Save As Image	Med	0.38	5.9	0.00	Sep 27, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Pdfcrowd Save as Image plugin by Pdfcrowd plugin <= 2.16.0 versions.
CVE-2023-40604	Jesmadsen Cookies By Jm	Med	0.38	5.9	0.00	Sep 27, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Jes Madsen Cookies by JM plugin <= 1.0 versions.
CVE-2023-28790	Brett Shumaker Simple Staff List	Med	0.38	5.9	0.00	Sep 27, 2023	Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Brett Shumaker Simple Staff List plugin <= 2.2.3 versions.
CVE-2023-27622	Guruwalk Guruwalk Affiliates	Med	0.38	5.9	0.00	Sep 27, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Abel Ruiz GuruWalk Affiliates plugin <= 1.0.0 versions.
CVE-2023-27617	Carrcommunications Rsvpmaker	Med	0.38	5.9	0.00	Sep 27, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in David F. Carr RSVPMaker plugin <= 10.6.6 versions.
CVE-2023-25483	Easycomingsoon Easy Coming Soon	Med	0.38	5.9	0.00	Sep 27, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ankit Agarwal, Priyanshu Mittal Easy Coming Soon plugin <= 2.3 versions.
CVE-2023-41949	Avirtum Ifolders	Med	0.38	5.9	0.00	Sep 25, 2023	Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Avirtum iFolders plugin <= 1.5.0 versions.
CVE-2023-41948	WordPress Cookie Notice & Consent	Med	0.38	5.9	0.00	Sep 25, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Christoph Rado Cookie Notice & Consent plugin <= 1.6.0 versions.
CVE-2023-5054	WordPress Super Store Finder	Med	0.38	5.8	0.01	Sep 19, 2023	The Super Store Finder plugin for WordPress is vulnerable to unauthenticated arbitrary email creation and relay in versions up to, and including, 6.9.3. This is due to insufficient restrictions on the sendMail.php file that allows direct access. This makes it possible for…
CVE-2023-40560	Toolstack Schedule Posts Calendar	Med	0.38	5.9	0.00	Sep 6, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Greg Ross Schedule Posts Calendar plugin <= 5.2 versions.
CVE-2023-40553	Plausible Plausible Analytics	Med	0.38	5.8	0.00	Sep 6, 2023	Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Plausible.Io Plausible Analytics plugin <= 1.3.3 versions.
CVE-2023-40552	Gurcharan Singh Fitness Calculators Plugin	Med	0.38	5.9	0.00	Sep 6, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gurcharan Singh Fitness calculators plugin plugin <= 2.0.7 versions.
CVE-2023-40329	WordPress Custom Admin Login Page \| WPZest	Med	0.38	5.9	0.00	Sep 6, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPZest Custom Admin Login Page \| WPZest plugin <= 1.2.0 versions.
CVE-2023-40328	Carrrot Carrrot	Med	0.38	5.9	0.00	Sep 6, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Carrrot plugin <= 1.1.0 versions.
CVE-2023-40007	Ujwolbastakoti Ct Commerce	Med	0.38	5.9	0.00	Sep 6, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ujwol Bastakoti CT Commerce plugin <= 2.0.1 versions.
CVE-2023-40206	Hwk Fr Wp 404 Auto Redirect To Similar Post	Med	0.38	5.9	0.00	Sep 4, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in hwk-fr WP 404 Auto Redirect to Similar Post plugin <= 1.0.3 versions.
CVE-2023-39987	Joomlaserviceprovider Wsecure	Med	0.38	5.9	0.00	Sep 4, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ajay Lulia wSecure Lite plugin <= 2.5 versions.
CVE-2023-39919	WordPress wpShopGermany – Protected Shops	Med	0.38	5.9	0.00	Sep 4, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in maennchen1.De wpShopGermany – Protected Shops plugin <= 2.0 versions.
CVE-2023-36382	Jeffrey Wp Media Library Categories	Med	0.38	5.9	0.00	Sep 4, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Jeffrey-WP Media Library Categories plugin <= 2.0.0 versions.
CVE-2023-25465	Gopiplus Wp Tell A Friend Popup Form	Med	0.38	5.9	0.00	Sep 4, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy wp tell a friend popup form plugin <= 7.1 versions.
CVE-2023-38521	Kristarella Exifography	Med	0.38	5.9	0.00	Sep 3, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Exifography plugin <= 1.3.1 versions.
CVE-2023-38518	Visualmodo Borderless	Med	0.38	5.9	0.00	Sep 3, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Visualmodo Borderless plugin <= 1.4.8 versions.
CVE-2023-38517	Realwebcare Wrc Pricing Tables	Med	0.38	5.9	0.00	Sep 3, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Realwebcare WRC Pricing Tables plugin <= 2.3.7 versions.
CVE-2023-38482	Qualityunit Post Affiliate Pro	Med	0.38	5.9	0.00	Sep 3, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in QualityUnit Post Affiliate Pro plugin <= 1.25.0 versions.
CVE-2023-38476	SuiteDash Client Portal \	Med	0.38	5.9	0.00	Sep 3, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in SuiteDash :: ONE Dashboard® Client Portal : SuiteDash Direct Login plugin <= 1.7.6 versions.
CVE-2023-38387	Elastic Email Sender Elastic Email Sender	Med	0.38	5.9	0.00	Sep 3, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Elastic Email Sender plugin <= 1.2.6 versions.
CVE-2023-37986	Miniorange YourMembership Single Sign On	Med	0.38	5.9	0.00	Sep 1, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in miniOrange YourMembership Single Sign On – YM SSO Login plugin <= 1.1.3 versions.
CVE-2023-25488	Ducbuiquang Wp Default Feature Image	Med	0.38	5.9	0.00	Sep 1, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Duc Bui Quang WP Default Feature Image plugin <= 1.0.1.1 versions.
CVE-2023-25477	Yotuwp Video Gallery	Med	0.38	5.9	0.00	Sep 1, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Yotuwp Video Gallery plugin <= 1.3.12 versions.
CVE-2023-25044	Sumo Social Share Boost	Med	0.38	5.9	0.00	Sep 1, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Sumo Social Share Boost plugin <= 4.4 versions.
CVE-2023-25042	Liam Gladdy oAuth Twitter Feed for Developers	Med	0.38	5.9	0.00	Sep 1, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Liam Gladdy (Storm Consultancy) oAuth Twitter Feed for Developers plugin <= 2.3.0 versions.
CVE-2023-24412	Web Settler Image Social Feed	Med	0.38	5.9	0.00	Sep 1, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Web-Settler Image Social Feed plugin <= 1.7.6 versions.
CVE-2023-35092	Abhayrajmca Breadcrumb Simple	Med	0.38	5.9	0.00	Aug 30, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Abhay Yadav Breadcrumb simple plugin <= 1.3 versions.
CVE-2023-34372	Didier Sampaolo Spamreferrerblock	Med	0.38	5.9	0.00	Aug 30, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Didier Sampaolo SpamReferrerBlock plugin <= 2.22 versions.
CVE-2023-32294	Radical Web Design Gdpr Cookie Consent Notice Box	Med	0.38	5.9	0.00	Aug 30, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Radical Web Design GDPR Cookie Consent Notice Box plugin <= 1.1.6 versions.
CVE-2023-28692	Kevonadonis Wp Abstracts	Med	0.38	5.9	0.00	Aug 30, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kevon Adonis WP Abstracts plugin <= 2.6.3 versions.
CVE-2023-28415	Xootix Side Cart Woocommerce	Med	0.38	5.9	0.01	Aug 30, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in XootiX Side Cart Woocommerce (Ajax) plugin <= 2.2 versions.
CVE-2023-27621	Mrdemonwolf Livestream Notice	Med	0.38	5.9	0.00	Aug 30, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MrDemonWolf Livestream Notice plugin <= 1.2.0 versions.
CVE-2023-25466	WordPress Who Hit The Page – Hit Counter	Med	0.38	5.8	0.00	Aug 30, 2023	Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Mahlamusa Who Hit The Page – Hit Counter plugin <= 1.4.14.3 versions.
CVE-2023-24401	WordPress Mobile Call Now & Map Buttons	Med	0.38	5.9	0.00	Aug 30, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Davidsword Mobile Call Now & Map Buttons plugin <= 1.5.0 versions.
CVE-2023-24397	Reservation Reservation.studio	Med	0.38	5.9	0.00	Aug 30, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Reservation.Studio Reservation.Studio widget plugin <= 1.0.11 versions.
CVE-2023-34173	WordPress Yandex Metrica Counter	Med	0.38	5.9	0.00	Aug 30, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Alexander Semikashev Yandex Metrica Counter plugin <= 1.4.3 versions.
CVE-2023-34172	Miled Wordpress Social Login	Med	0.38	5.9	0.00	Aug 30, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Miled WordPress Social Login plugin <= 3.0.4 versions.

CVE-2023-41860MedSep 27, 2023
TravelMap
Travelmap
risk 0.38cvss 5.8epss 0.00
Unauth. Cross-Site Scripting (XSS) vulnerability in TravelMap plugin <= 1.0.1 versions.
CVE-2023-41242MedSep 27, 2023
Creativehassan
Snap Pixel
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Hassan Ali Snap Pixel plugin <= 1.5.7 versions.
CVE-2023-41241MedSep 27, 2023
Surecart
Surecart
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in SureCart WordPress Ecommerce For Creating Fast Online Stores plugin <= 2.5.0 versions.
CVE-2023-40677MedSep 27, 2023
Gopiplus
Vertical Marquee
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Vertical marquee plugin <= 7.1 versions.
CVE-2023-40676MedSep 27, 2023
Veronalabs
Slimstat Analytics
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Jason Crouse, VeronaLabs Slimstat Analytics plugin <= 5.0.8 versions.
CVE-2023-40675MedSep 27, 2023
Pluginops
Landing Page Builder
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PluginOps Landing Page Builder plugin <= 1.5.1.2 versions.
CVE-2023-40668MedSep 27, 2023
Pdfcrowd
Save As PDF
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Pdfcrowd Save as PDF plugin by Pdfcrowd plugin <= 2.16.0 versions.
CVE-2023-40665MedSep 27, 2023
Pdfcrowd
Save As Image
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Pdfcrowd Save as Image plugin by Pdfcrowd plugin <= 2.16.0 versions.
CVE-2023-40604MedSep 27, 2023
Jesmadsen
Cookies By Jm
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Jes Madsen Cookies by JM plugin <= 1.0 versions.
CVE-2023-28790MedSep 27, 2023
Brett Shumaker
Simple Staff List
risk 0.38cvss 5.9epss 0.00
Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Brett Shumaker Simple Staff List plugin <= 2.2.3 versions.
CVE-2023-27622MedSep 27, 2023
Guruwalk
Guruwalk Affiliates
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Abel Ruiz GuruWalk Affiliates plugin <= 1.0.0 versions.
CVE-2023-27617MedSep 27, 2023
Carrcommunications
Rsvpmaker
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in David F. Carr RSVPMaker plugin <= 10.6.6 versions.
CVE-2023-25483MedSep 27, 2023
Easycomingsoon
Easy Coming Soon
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ankit Agarwal, Priyanshu Mittal Easy Coming Soon plugin <= 2.3 versions.
CVE-2023-41949MedSep 25, 2023
Avirtum
Ifolders
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Avirtum iFolders plugin <= 1.5.0 versions.
CVE-2023-41948MedSep 25, 2023
WordPress
Cookie Notice & Consent
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Christoph Rado Cookie Notice & Consent plugin <= 1.6.0 versions.
CVE-2023-5054MedSep 19, 2023
WordPress
Super Store Finder
risk 0.38cvss 5.8epss 0.01
The Super Store Finder plugin for WordPress is vulnerable to unauthenticated arbitrary email creation and relay in versions up to, and including, 6.9.3. This is due to insufficient restrictions on the sendMail.php file that allows direct access. This makes it possible for…
CVE-2023-40560MedSep 6, 2023
Toolstack
Schedule Posts Calendar
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Greg Ross Schedule Posts Calendar plugin <= 5.2 versions.
CVE-2023-40553MedSep 6, 2023
Plausible
Plausible Analytics
risk 0.38cvss 5.8epss 0.00
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Plausible.Io Plausible Analytics plugin <= 1.3.3 versions.
CVE-2023-40552MedSep 6, 2023
Gurcharan Singh
Fitness Calculators Plugin
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gurcharan Singh Fitness calculators plugin plugin <= 2.0.7 versions.
CVE-2023-40329MedSep 6, 2023
WordPress
Custom Admin Login Page | WPZest
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPZest Custom Admin Login Page | WPZest plugin <= 1.2.0 versions.
CVE-2023-40328MedSep 6, 2023
Carrrot
Carrrot
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Carrrot plugin <= 1.1.0 versions.
CVE-2023-40007MedSep 6, 2023
Ujwolbastakoti
Ct Commerce
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ujwol Bastakoti CT Commerce plugin <= 2.0.1 versions.
CVE-2023-40206MedSep 4, 2023
Hwk Fr
Wp 404 Auto Redirect To Similar Post
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in hwk-fr WP 404 Auto Redirect to Similar Post plugin <= 1.0.3 versions.
CVE-2023-39987MedSep 4, 2023
Joomlaserviceprovider
Wsecure
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ajay Lulia wSecure Lite plugin <= 2.5 versions.
CVE-2023-39919MedSep 4, 2023
WordPress
wpShopGermany – Protected Shops
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in maennchen1.De wpShopGermany – Protected Shops plugin <= 2.0 versions.
CVE-2023-36382MedSep 4, 2023
Jeffrey Wp
Media Library Categories
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Jeffrey-WP Media Library Categories plugin <= 2.0.0 versions.
CVE-2023-25465MedSep 4, 2023
Gopiplus
Wp Tell A Friend Popup Form
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy wp tell a friend popup form plugin <= 7.1 versions.
CVE-2023-38521MedSep 3, 2023
Kristarella
Exifography
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Exifography plugin <= 1.3.1 versions.
CVE-2023-38518MedSep 3, 2023
Visualmodo
Borderless
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Visualmodo Borderless plugin <= 1.4.8 versions.
CVE-2023-38517MedSep 3, 2023
Realwebcare
Wrc Pricing Tables
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Realwebcare WRC Pricing Tables plugin <= 2.3.7 versions.
CVE-2023-38482MedSep 3, 2023
Qualityunit
Post Affiliate Pro
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in QualityUnit Post Affiliate Pro plugin <= 1.25.0 versions.
CVE-2023-38476MedSep 3, 2023
SuiteDash
Client Portal \
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in SuiteDash :: ONE Dashboard® Client Portal : SuiteDash Direct Login plugin <= 1.7.6 versions.
CVE-2023-38387MedSep 3, 2023
Elastic Email Sender
Elastic Email Sender
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Elastic Email Sender plugin <= 1.2.6 versions.
CVE-2023-37986MedSep 1, 2023
Miniorange
YourMembership Single Sign On
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in miniOrange YourMembership Single Sign On – YM SSO Login plugin <= 1.1.3 versions.
CVE-2023-25488MedSep 1, 2023
Ducbuiquang
Wp Default Feature Image
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Duc Bui Quang WP Default Feature Image plugin <= 1.0.1.1 versions.
CVE-2023-25477MedSep 1, 2023
Yotuwp
Video Gallery
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Yotuwp Video Gallery plugin <= 1.3.12 versions.
CVE-2023-25044MedSep 1, 2023
Sumo
Social Share Boost
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Sumo Social Share Boost plugin <= 4.4 versions.
CVE-2023-25042MedSep 1, 2023
Liam Gladdy
oAuth Twitter Feed for Developers
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Liam Gladdy (Storm Consultancy) oAuth Twitter Feed for Developers plugin <= 2.3.0 versions.
CVE-2023-24412MedSep 1, 2023
Web Settler
Image Social Feed
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Web-Settler Image Social Feed plugin <= 1.7.6 versions.
CVE-2023-35092MedAug 30, 2023
Abhayrajmca
Breadcrumb Simple
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Abhay Yadav Breadcrumb simple plugin <= 1.3 versions.
CVE-2023-34372MedAug 30, 2023
Didier Sampaolo
Spamreferrerblock
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Didier Sampaolo SpamReferrerBlock plugin <= 2.22 versions.
CVE-2023-32294MedAug 30, 2023
Radical Web Design
Gdpr Cookie Consent Notice Box
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Radical Web Design GDPR Cookie Consent Notice Box plugin <= 1.1.6 versions.
CVE-2023-28692MedAug 30, 2023
Kevonadonis
Wp Abstracts
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kevon Adonis WP Abstracts plugin <= 2.6.3 versions.
CVE-2023-28415MedAug 30, 2023
Xootix
Side Cart Woocommerce
risk 0.38cvss 5.9epss 0.01
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in XootiX Side Cart Woocommerce (Ajax) plugin <= 2.2 versions.
CVE-2023-27621MedAug 30, 2023
Mrdemonwolf
Livestream Notice
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MrDemonWolf Livestream Notice plugin <= 1.2.0 versions.
CVE-2023-25466MedAug 30, 2023
WordPress
Who Hit The Page – Hit Counter
risk 0.38cvss 5.8epss 0.00
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Mahlamusa Who Hit The Page – Hit Counter plugin <= 1.4.14.3 versions.
CVE-2023-24401MedAug 30, 2023
WordPress
Mobile Call Now & Map Buttons
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Davidsword Mobile Call Now & Map Buttons plugin <= 1.5.0 versions.
CVE-2023-24397MedAug 30, 2023
Reservation
Reservation.studio
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Reservation.Studio Reservation.Studio widget plugin <= 1.0.11 versions.
CVE-2023-34173MedAug 30, 2023
WordPress
Yandex Metrica Counter
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Alexander Semikashev Yandex Metrica Counter plugin <= 1.4.3 versions.
CVE-2023-34172MedAug 30, 2023
Miled
Wordpress Social Login
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Miled WordPress Social Login plugin <= 3.0.4 versions.

Page 476 of 805