Vendor CVEs

WordPress

All CVEs

40,234 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2023-35878	Vadym K. Extra User Details	Med	0.38	5.9	0.00	Jun 20, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Vadym K. Extra User Details plugin <= 0.5 versions.
CVE-2023-35779	Seedwebs Seed Fonts	Med	0.38	5.9	0.00	Jun 19, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Seed Webs Seed Fonts plugin <= 2.3.1 versions.
CVE-2023-33213	Gvectors Wpview	Med	0.38	5.9	0.00	Jun 19, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in gVectors Display Custom Fields – wpView plugin <= 1.3.0 versions.
CVE-2023-26537	Nicolly Wp No External Links	Med	0.38	5.9	0.00	Jun 16, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in nicolly WP No External Links plugin <= 1.0.2 versions.
CVE-2023-26527	Wpindeed Debug Assistant	Med	0.38	5.9	0.00	Jun 16, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPIndeed Debug Assistant plugin <= 1.4 versions.
CVE-2023-25974	Wp2syslog Project Wp2syslog	Med	0.38	5.9	0.00	Jun 16, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in psicosi448 wp2syslog plugin <= 1.0.5 versions.
CVE-2023-26515	Ko Takagi Simple Slug Translate	Med	0.38	5.9	0.00	Jun 16, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ko Takagi Simple Slug Translate plugin <= 2.7.2 versions.
CVE-2023-26541	Alexander Suess Asmember	Med	0.38	5.9	0.00	Jun 16, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Alexander Suess asMember plugin <= 1.5.4 versions.
CVE-2023-25963	Joomsky Js Job Manager	Med	0.38	5.9	0.00	Jun 16, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in JoomSky JS Job Manager plugin <= 2.0.0 versions.
CVE-2023-25972	WordPress Plugin	Med	0.38	5.9	0.00	Jun 15, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in IKSWEB WordPress Старт plugin <= 3.7 versions.
CVE-2023-27624	Redirect After Login Project Redirect After Login	Med	0.38	5.9	0.01	Jun 13, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Marcelotorres Redirect After Login plugin <= 0.1.9 versions.
CVE-2023-25978	Nate Reist Protected Posts Logout Button	Med	0.38	5.9	0.00	Jun 13, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Nate Reist Protected Posts Logout Button plugin <= 1.4.5 versions.
CVE-2023-28620	Cyberuslabs Cyberus Key	Med	0.38	5.9	0.00	Jun 13, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Cyberus Labs Cyberus Key plugin <= 1.0 versions.
CVE-2023-26538	Chat Bee Project Chat Bee	Med	0.38	5.9	0.00	Jun 13, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kamyabsoft Chat Bee plugin <= 1.1.0 versions.
CVE-2023-26528	Shipyaari Shipping Management	Med	0.38	5.9	0.00	Jun 13, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in jinit9906 Shipyaari Shipping Management plugin <= 1.0 versions.
CVE-2023-25964	Noah Hearle, Design Extreme We’re Open!	Med	0.38	5.9	0.00	Jun 13, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Noah Hearle, Design Extreme We’re Open! plugin <= 1.46 versions.
CVE-2023-28933	Stpetedesign Call Now Accessibility Button	Med	0.38	5.9	0.00	Jun 12, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in StPeteDesign Call Now Accessibility Button plugin <= 1.1 versions.
CVE-2023-31236	Unfocus Scripts N Styles	Med	0.38	5.9	0.00	Jun 12, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in unFocus Projects Scripts n Styles plugin <= 3.5.7 versions.
CVE-2023-30745	IP Metaboxes Project IP Metaboxes	Med	0.38	5.9	0.00	Jun 12, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Phan Chuong IP Metaboxes plugin <= 2.1.1 versions.
CVE-2023-23822	Utm Tracker Project Utm Tracker	Med	0.38	5.9	0.00	Jun 12, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ludwig Media UTM Tracker plugin <= 1.3.1 versions.
CVE-2023-23819	Rolands Umbrovskis Itemprop Wp For Serp/seo Rich Snippets	Med	0.38	5.9	0.00	Jun 12, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Rolands Umbrovskis itemprop WP for SERP/SEO Rich snippets plugin <= 3.5.201706131 versions.
CVE-2023-23818	Aviplugins.com Wp Register Profile With Shortcode	Med	0.38	5.9	0.00	Jun 12, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Aviplugins.Com WP Register Profile With Shortcode plugin <= 3.5.7 versions.
CVE-2022-45827	Galleryplugins Video Contest	Med	0.38	5.9	0.00	Jun 12, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in GalleryPlugins Video Contest plugin <= 3.2 versions.
CVE-2021-4369	WordPress Frontend File Manager	Med	0.38	5.8	0.01	Jun 7, 2023	The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Content Injection in versions up to, and including, 18.2. This is due to lacking authorization protections, checks against users editing other's posts, and lacking a security nonce, all on the…
CVE-2021-4351	WordPress Frontend File Manager	Med	0.38	5.8	0.01	Jun 7, 2023	The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Post Meta Change in versions up to, and including, 18.2. This is due to lacking authentication protections, capability checks, and sanitization, all on the wpfm_file_meta_update AJAX action. This…
CVE-2023-32582	Don8 Project Don8	Med	0.38	5.9	0.00	Jun 3, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kyle Maurer Don8 plugin <= 0.4 versions.
CVE-2023-33211	André Bräkling WP-Matomo Integration	Med	0.38	5.9	0.00	May 28, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in André Bräkling WP-Matomo Integration (WP-Piwik) plugin <= 1.0.27 versions.
CVE-2023-33328	Pluginops Mailchimp Subscribe Form	Med	0.38	5.9	0.00	May 28, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PluginOps MailChimp Subscribe Form plugin <= 4.0.9.1 versions.
CVE-2023-32958	Nosegraze Novelist	Med	0.38	5.9	0.00	May 28, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Nose Graze Novelist plugin <= 1.2.0 versions.
CVE-2023-33216	WordPress WooDiscuz – WooCommerce Comments	Med	0.38	5.9	0.00	May 28, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in gVectors Team WooDiscuz – WooCommerce Comments woodiscuz-woocommerce-comments allows Stored XSS.This issue affects WooDiscuz – WooCommerce Comments: from n/a through 2.2.9.
CVE-2023-25781	Sebastian Krysmanski Upload File Type Settings plugin	Med	0.38	5.9	0.00	May 26, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Sebastian Krysmanski Upload File Type Settings plugin <= 1.1 versions.
CVE-2023-25028	Cc Custom Taxonomy Project Cc Custom Taxonomy	Med	0.38	5.9	0.00	May 24, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in chuyencode CC Custom Taxonomy plugin <= 1.0.1 versions.
CVE-2022-47157	Webhammer Wp Custom Fields Search	Med	0.38	5.9	0.00	May 18, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Don Benjamin WP Custom Fields Search plugin <= 1.2.34 versions.
CVE-2023-32515	Custom Field Suite Project Custom Field Suite	Med	0.38	5.9	0.00	May 18, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Matt Gibbs Custom Field Suite plugin <= 2.6.2.1 versions.
CVE-2023-31233	Baidu Tongji Generator Project Baidu Tongji Generator	Med	0.38	5.9	0.00	May 18, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Haoqisir Baidu Tongji generator plugin <= 1.0.2 versions.
CVE-2023-23720	NetReviews SAS Verified Reviews	Med	0.38	5.9	0.00	May 16, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in NetReviews SAS Verified Reviews (Avis Vérifiés) plugin <= 2.3.13 versions.
CVE-2023-23727	Formio Live Chat	Med	0.38	5.9	0.00	May 16, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Formilla Live Chat by Formilla plugin <= 1.3 versions.
CVE-2023-23673	Themeist I Recommend This	Med	0.38	5.9	0.00	May 16, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Harish Chouhan, Themeist I Recommend This plugin <= 3.8.3 versions.
CVE-2023-23682	Duplicator Ezp Maintenance Mode	Med	0.38	5.9	0.00	May 15, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Snap Creek Software EZP Maintenance Mode plugin <= 1.0.1 versions.
CVE-2023-23683	White Label Branding For Elementor Page Builder Project White Label Branding For Elementor Page Builder	Med	0.38	5.9	0.00	May 15, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ozan Canakli White Label Branding for Elementor Page Builder plugin <= 1.0.2 versions.
CVE-2023-23674	Rvola Wp Original Media Path	Med	0.38	5.9	0.00	May 15, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in RVOLA WP Original Media Path plugin <= 2.4.0 versions.
CVE-2023-23654	Sparkpost Sparkpost	Med	0.38	5.9	0.00	May 15, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in SparkPost plugin <= 3.2.5 versions.
CVE-2023-22690	Shopfiles Ebook Store	Med	0.38	5.9	0.00	May 15, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Shopfiles Ltd Ebook Store plugin <= 5.775 versions.
CVE-2023-22684	Hellobar Subscribers	Med	0.38	5.9	0.00	May 15, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Subscribers.Com Subscribers plugin <= 1.5.3 versions.
CVE-2023-28414	Apexchat Apexchat	Med	0.38	5.9	0.00	May 12, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in ApexChat plugin <= 1.3.1 versions.
CVE-2023-25958	Simple Tooltips Project Simple Tooltips	Med	0.38	5.9	0.00	May 12, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Justin Saad Simple Tooltips plugin <= 2.1.4 versions.
CVE-2023-25460	CodeSolz Easy AD Manager	Med	0.38	5.9	0.00	May 12, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CodeSolz Easy Ad Manager plugin <= 1.0.0 versions.
CVE-2023-23810	Snaporbital Panorama	Med	0.38	5.9	0.00	May 12, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in SnapOrbital Panorama plugin <= 1.5 versions.
CVE-2023-22685	Tipsandtricks Hq Category Specific Rss Feed Subscription	Med	0.38	5.9	0.00	May 12, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin <= v2.2 versions.
CVE-2023-2490	WordPress UserAgent-Spy	Med	0.38	5.9	0.00	May 11, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Fernando Briano UserAgent-Spy plugin <= 1.3.1 versions.

CVE-2023-35878MedJun 20, 2023
Vadym K.
Extra User Details
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Vadym K. Extra User Details plugin <= 0.5 versions.
CVE-2023-35779MedJun 19, 2023
Seedwebs
Seed Fonts
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Seed Webs Seed Fonts plugin <= 2.3.1 versions.
CVE-2023-33213MedJun 19, 2023
Gvectors
Wpview
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in gVectors Display Custom Fields – wpView plugin <= 1.3.0 versions.
CVE-2023-26537MedJun 16, 2023
Nicolly
Wp No External Links
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in nicolly WP No External Links plugin <= 1.0.2 versions.
CVE-2023-26527MedJun 16, 2023
Wpindeed
Debug Assistant
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPIndeed Debug Assistant plugin <= 1.4 versions.
CVE-2023-25974MedJun 16, 2023
Wp2syslog Project
Wp2syslog
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in psicosi448 wp2syslog plugin <= 1.0.5 versions.
CVE-2023-26515MedJun 16, 2023
Ko Takagi
Simple Slug Translate
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ko Takagi Simple Slug Translate plugin <= 2.7.2 versions.
CVE-2023-26541MedJun 16, 2023
Alexander Suess
Asmember
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Alexander Suess asMember plugin <= 1.5.4 versions.
CVE-2023-25963MedJun 16, 2023
Joomsky
Js Job Manager
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in JoomSky JS Job Manager plugin <= 2.0.0 versions.
CVE-2023-25972MedJun 15, 2023
WordPress
Plugin
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in IKSWEB WordPress Старт plugin <= 3.7 versions.
CVE-2023-27624MedJun 13, 2023
Redirect After Login Project
Redirect After Login
risk 0.38cvss 5.9epss 0.01
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Marcelotorres Redirect After Login plugin <= 0.1.9 versions.
CVE-2023-25978MedJun 13, 2023
Nate Reist
Protected Posts Logout Button
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Nate Reist Protected Posts Logout Button plugin <= 1.4.5 versions.
CVE-2023-28620MedJun 13, 2023
Cyberuslabs
Cyberus Key
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Cyberus Labs Cyberus Key plugin <= 1.0 versions.
CVE-2023-26538MedJun 13, 2023
Chat Bee Project
Chat Bee
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kamyabsoft Chat Bee plugin <= 1.1.0 versions.
CVE-2023-26528MedJun 13, 2023
Shipyaari
Shipping Management
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in jinit9906 Shipyaari Shipping Management plugin <= 1.0 versions.
CVE-2023-25964MedJun 13, 2023
Noah Hearle, Design Extreme
We’re Open!
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Noah Hearle, Design Extreme We’re Open! plugin <= 1.46 versions.
CVE-2023-28933MedJun 12, 2023
Stpetedesign
Call Now Accessibility Button
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in StPeteDesign Call Now Accessibility Button plugin <= 1.1 versions.
CVE-2023-31236MedJun 12, 2023
Unfocus
Scripts N Styles
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in unFocus Projects Scripts n Styles plugin <= 3.5.7 versions.
CVE-2023-30745MedJun 12, 2023
IP Metaboxes Project
IP Metaboxes
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Phan Chuong IP Metaboxes plugin <= 2.1.1 versions.
CVE-2023-23822MedJun 12, 2023
Utm Tracker Project
Utm Tracker
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ludwig Media UTM Tracker plugin <= 1.3.1 versions.
CVE-2023-23819MedJun 12, 2023
Rolands Umbrovskis
Itemprop Wp For Serp/seo Rich Snippets
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Rolands Umbrovskis itemprop WP for SERP/SEO Rich snippets plugin <= 3.5.201706131 versions.
CVE-2023-23818MedJun 12, 2023
Aviplugins.com
Wp Register Profile With Shortcode
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Aviplugins.Com WP Register Profile With Shortcode plugin <= 3.5.7 versions.
CVE-2022-45827MedJun 12, 2023
Galleryplugins
Video Contest
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in GalleryPlugins Video Contest plugin <= 3.2 versions.
CVE-2021-4369MedJun 7, 2023
WordPress
Frontend File Manager
risk 0.38cvss 5.8epss 0.01
The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Content Injection in versions up to, and including, 18.2. This is due to lacking authorization protections, checks against users editing other's posts, and lacking a security nonce, all on the…
CVE-2021-4351MedJun 7, 2023
WordPress
Frontend File Manager
risk 0.38cvss 5.8epss 0.01
The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Post Meta Change in versions up to, and including, 18.2. This is due to lacking authentication protections, capability checks, and sanitization, all on the wpfm_file_meta_update AJAX action. This…
CVE-2023-32582MedJun 3, 2023
Don8 Project
Don8
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kyle Maurer Don8 plugin <= 0.4 versions.
CVE-2023-33211MedMay 28, 2023
André Bräkling
WP-Matomo Integration
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in André Bräkling WP-Matomo Integration (WP-Piwik) plugin <= 1.0.27 versions.
CVE-2023-33328MedMay 28, 2023
Pluginops
Mailchimp Subscribe Form
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PluginOps MailChimp Subscribe Form plugin <= 4.0.9.1 versions.
CVE-2023-32958MedMay 28, 2023
Nosegraze
Novelist
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Nose Graze Novelist plugin <= 1.2.0 versions.
CVE-2023-33216MedMay 28, 2023
WordPress
WooDiscuz – WooCommerce Comments
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in gVectors Team WooDiscuz – WooCommerce Comments woodiscuz-woocommerce-comments allows Stored XSS.This issue affects WooDiscuz – WooCommerce Comments: from n/a through 2.2.9.
CVE-2023-25781MedMay 26, 2023
Sebastian Krysmanski
Upload File Type Settings plugin
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Sebastian Krysmanski Upload File Type Settings plugin <= 1.1 versions.
CVE-2023-25028MedMay 24, 2023
Cc Custom Taxonomy Project
Cc Custom Taxonomy
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in chuyencode CC Custom Taxonomy plugin <= 1.0.1 versions.
CVE-2022-47157MedMay 18, 2023
Webhammer
Wp Custom Fields Search
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Don Benjamin WP Custom Fields Search plugin <= 1.2.34 versions.
CVE-2023-32515MedMay 18, 2023
Custom Field Suite Project
Custom Field Suite
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Matt Gibbs Custom Field Suite plugin <= 2.6.2.1 versions.
CVE-2023-31233MedMay 18, 2023
Baidu Tongji Generator Project
Baidu Tongji Generator
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Haoqisir Baidu Tongji generator plugin <= 1.0.2 versions.
CVE-2023-23720MedMay 16, 2023
NetReviews SAS
Verified Reviews
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in NetReviews SAS Verified Reviews (Avis Vérifiés) plugin <= 2.3.13 versions.
CVE-2023-23727MedMay 16, 2023
Formio
Live Chat
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Formilla Live Chat by Formilla plugin <= 1.3 versions.
CVE-2023-23673MedMay 16, 2023
Themeist
I Recommend This
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Harish Chouhan, Themeist I Recommend This plugin <= 3.8.3 versions.
CVE-2023-23682MedMay 15, 2023
Duplicator
Ezp Maintenance Mode
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Snap Creek Software EZP Maintenance Mode plugin <= 1.0.1 versions.
CVE-2023-23683MedMay 15, 2023
White Label Branding For Elementor Page Builder Project
White Label Branding For Elementor Page Builder
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ozan Canakli White Label Branding for Elementor Page Builder plugin <= 1.0.2 versions.
CVE-2023-23674MedMay 15, 2023
Rvola
Wp Original Media Path
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in RVOLA WP Original Media Path plugin <= 2.4.0 versions.
CVE-2023-23654MedMay 15, 2023
Sparkpost
Sparkpost
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in SparkPost plugin <= 3.2.5 versions.
CVE-2023-22690MedMay 15, 2023
Shopfiles
Ebook Store
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Shopfiles Ltd Ebook Store plugin <= 5.775 versions.
CVE-2023-22684MedMay 15, 2023
Hellobar
Subscribers
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Subscribers.Com Subscribers plugin <= 1.5.3 versions.
CVE-2023-28414MedMay 12, 2023
Apexchat
Apexchat
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in ApexChat plugin <= 1.3.1 versions.
CVE-2023-25958MedMay 12, 2023
Simple Tooltips Project
Simple Tooltips
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Justin Saad Simple Tooltips plugin <= 2.1.4 versions.
CVE-2023-25460MedMay 12, 2023
CodeSolz
Easy AD Manager
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CodeSolz Easy Ad Manager plugin <= 1.0.0 versions.
CVE-2023-23810MedMay 12, 2023
Snaporbital
Panorama
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in SnapOrbital Panorama plugin <= 1.5 versions.
CVE-2023-22685MedMay 12, 2023
Tipsandtricks Hq
Category Specific Rss Feed Subscription
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin <= v2.2 versions.
CVE-2023-2490MedMay 11, 2023
WordPress
UserAgent-Spy
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Fernando Briano UserAgent-Spy plugin <= 1.3.1 versions.

Page 479 of 805