Vendor CVEs

WordPress

All CVEs

40,233 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2023-25059	avalex avalex	Med	0.38	5.9	0.01	Apr 7, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in avalex GmbH avalex – Automatically secure legal texts plugin <= 3.0.3 versions.
CVE-2023-24402	Wpbookingsystem Wp Booking System	Med	0.38	5.9	0.00	Apr 7, 2023	Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Veribo, Roland Murg WP Booking System – Booking Calendar plugin <= 2.0.18 versions.
CVE-2023-25062	Pinpoint Pinpoint Booking System	Med	0.38	5.9	0.01	Apr 6, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PINPOINT.WORLD Pinpoint Booking System plugin <= 2.9.9.2.8 versions.
CVE-2023-24396	E4J S.R.L. Vikbooking Hotel Booking Engine & Pms (wordpress Plugin)	Med	0.38	5.9	0.00	Apr 6, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in E4J s.R.L. VikBooking Hotel Booking Engine & PMS plugin <= 1.5.11 versions.
CVE-2023-24387	Wpdevart Organization Chart	Med	0.38	5.9	0.00	Apr 6, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPdevart Organization chart plugin <= 1.4.4 versions.
CVE-2023-24383	Kibokolabs Namaste\! Lms	Med	0.38	5.9	0.00	Apr 6, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Namaste! LMS plugin <= 2.5.9.1 versions.
CVE-2023-24004	WordPress Image and Video Lightbox, Image PopUp	Med	0.38	5.9	0.00	Apr 6, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPdevart Image and Video Lightbox, Image PopUp plugin <= 2.1.5 versions.
CVE-2023-24002	WordPress YouTube Embed, Playlist and Popup by WpDevArt	Med	0.38	5.9	0.00	Apr 6, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPdevart YouTube Embed, Playlist and Popup by WpDevArt plugin <= 2.6.3 versions.
CVE-2023-24006	Linksoftwarellc Wp Terms Popup	Med	0.38	5.9	0.00	Apr 6, 2023	Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Link Software LLC WP Terms Popup plugin <= 2.6.0 versions.
CVE-2023-24001	Ylefebvre Modal Dialog	Med	0.38	5.9	0.00	Apr 6, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Yannick Lefebvre Modal Dialog plugin <= 3.5.9 versions.
CVE-2023-23998	E4J S.R.L. VikRentCar Car Rental Management System	Med	0.38	5.9	0.00	Apr 6, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in E4J s.R.L. VikRentCar Car Rental Management System plugin <= 1.3.0 versions.
CVE-2023-23996	Properfraction Profilepress	Med	0.38	5.9	0.00	Apr 6, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in ProfilePress Membership Team ProfilePress plugin <= 4.5.3 versions.
CVE-2023-23980	Mailoptin Mailoptin	Med	0.38	5.9	0.00	Apr 6, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MailOptin Popup Builder Team MailOptin plugin <= 1.2.54.0 versions.
CVE-2023-23987	Wpeverest User Registration	Med	0.38	5.9	0.00	Apr 6, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPEverest User Registration plugin <= 2.3.0 versions.
CVE-2023-23972	Wpdevart Social Like Box And Page	Med	0.38	5.9	0.00	Apr 6, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Smplug-in Social Like Box and Page by WpDevArt plugin <= 0.8.39 versions.
CVE-2023-23971	Codepeople Wp Time Slots Booking Form	Med	0.38	5.9	0.00	Apr 6, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CodePeople WP Time Slots Booking Form plugin <= 1.1.81 versions.
CVE-2023-23982	Wpfrom Email Project Wpfrom Email	Med	0.38	5.9	0.00	Apr 6, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPGear.Pro WPFrom Email plugin <= 1.8.8 versions.
CVE-2023-23981	Quantumcloud Conversational Forms For Chatbot	Med	0.38	5.9	0.00	Apr 6, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in QuantumCloud Conversational Forms for ChatBot plugin <= 1.1.6 versions.
CVE-2023-23870	Wpdevart Responsive Vertical Icon Menu	Med	0.38	5.9	0.00	Apr 4, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in wpdevart Responsive Vertical Icon Menu plugin <= 1.5.8 versions.
CVE-2023-23878	Weplugins Wp Maps	Med	0.38	5.9	0.00	Apr 4, 2023	Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in flippercode WordPress Plugin for Google Maps – WP MAPS plugin <= 4.3.9 versions.
CVE-2023-23821	Marcin Pietrzak Interactive Polish Map	Med	0.38	5.9	0.00	Apr 4, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Marcin Pietrzak Interactive Polish Map plugin <= 1.2 versions.
CVE-2023-26529	Dupeoff.com Dupeoff	Med	0.38	5.9	0.00	Apr 3, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in DupeOff.Com DupeOff plugin <= 1.6 versions.
CVE-2023-23675	Catchsquare Wp Smart Preloader	Med	0.38	5.9	0.00	Mar 30, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Catchsquare WP Smart Preloader plugin <= 1.15 versions.
CVE-2022-47613	Quantumcloud AI ChatBot	Med	0.38	5.9	0.00	Mar 29, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in QuantumCloud AI ChatBot plugin <= 4.3.0 versions.
CVE-2022-47610	Mrdigital Simple Image Popup	Med	0.38	5.9	0.00	Mar 29, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Mr Digital Simple Image Popup plugin <= 1.3.6 versions.
CVE-2022-47607	Usersnap Usersnap	Med	0.38	5.9	0.00	Mar 29, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Usersnap plugin <= 4.16 versions.
CVE-2022-47596	Jeffrey Wp Media Library Categories	Med	0.38	5.9	0.00	Mar 29, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Jeffrey-WP Media Library Categories plugin <= 1.9.9 versions.
CVE-2022-47438	Wpdevart Booking Calendar	Med	0.38	5.9	0.00	Mar 29, 2023	Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in WpDevArt Booking calendar, Appointment Booking System plugin <= 3.2.3 versions.
CVE-2023-25704	Wpmart Interactive Svg Image Map Builder	Med	0.38	5.9	0.00	Mar 28, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Mehjabin Orthi Interactive SVG Image Map Builder plugin <= 1.0 versions.
CVE-2022-47170	Unlimited Elements Unlimited Elements For Elementor	Med	0.38	5.9	0.00	Mar 28, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 1.5.48 versions.
CVE-2022-46863	Fullworks Quick Event Manager	Med	0.38	5.9	0.00	Mar 28, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Event Manager plugin <= 9.6.4 versions.
CVE-2023-22707	Wpsoul Greenshift	Med	0.38	5.9	0.00	Mar 27, 2023	Auth. (author+) Cross-Site Scripting (XSS) vulnerability in Wpsoul Greenshift – animation and page builder blocks plugin <= 4.9.9 versions.
CVE-2023-26008	WordPress Top 10	Med	0.38	5.9	0.00	Mar 23, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ajay D'Souza Top 10 – Popular posts plugin for WordPress plugin <= 3.2.4 versions.
CVE-2023-25992	Cminds Cm Answers	Med	0.38	5.9	0.00	Mar 23, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CreativeMindsSolutions CM Answers plugin <= 3.1.9 versions.
CVE-2023-25456	Klaviyo Klaviyo	Med	0.38	5.9	0.00	Mar 23, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Klaviyo, Inc. Klaviyo plugin <= 3.0.7 versions.
CVE-2023-23707	Awsm Embed Any Document	Med	0.38	5.9	0.00	Mar 23, 2023	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), Unrestricted Upload of File with Dangerous Type vulnerability in Awsm Innovations Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files allows Stored XSS via upload of SVG and HTML…
CVE-2022-47173	Advancedformintegration Advanced Form Integration	Med	0.38	5.9	0.00	Mar 23, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in nasirahmed Connect Contact Form 7, WooCommerce To Google Sheets & Other Platforms – Advanced Form Integration plugin <= 1.62.0 versions.
CVE-2023-23722	Winwar Wp Ebay Product Feeds	Med	0.38	5.9	0.00	Mar 23, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Winwar Media WP eBay Product Feeds plugin <= 3.3.1 versions.
CVE-2022-47589	Thisfunctional Ctt Expresso Para Woocommerce	Med	0.38	5.9	0.00	Mar 23, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in this.Functional CTT Expresso para WooCommerce plugin <= 3.2.11 versions.
CVE-2023-22716	OOPSpam Oopspam Anti Spam	Med	0.38	5.9	0.00	Mar 23, 2023	Auth. (admin+) Cross-Site Scripting vulnerability in OOPSpam OOPSpam Anti-Spam plugin <= 1.1.35 versions.
CVE-2023-22715	WordPress WP-CommentNavi	Med	0.38	5.9	0.00	Mar 23, 2023	Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Lester 'GaMerZ' Chan WP-CommentNavi plugin <= 1.12.1 versions.
CVE-2023-28422	Mage People Event Manager and Tickets Selling Plugin for WooCommerce	Med	0.38	5.9	0.00	Mar 23, 2023	Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in MagePeople Team Event Manager and Tickets Selling Plugin for WooCommerce <= 3.8.6. versions.
CVE-2023-23718	Page Loading Effects Project Page Loading Effects	Med	0.38	5.9	0.00	Mar 20, 2023	Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Esstat17 Page Loading Effects plugin <= 2.0.0 versions.
CVE-2023-22680	Altanic No API Amazon Affiliate	Med	0.38	5.9	0.00	Mar 20, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Altanic No API Amazon Affiliate plugin <= 4.2.2 versions.
CVE-2023-22679	Wp Better Emails Project Wp Better Emails	Med	0.38	5.9	0.00	Mar 20, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Nicolas Lemoine WP Better Emails plugin <= 0.4 versions.
CVE-2023-25795	WordPress Feed Changer & Remover	Med	0.38	5.9	0.00	Mar 20, 2023	Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in WP-master.Ir Feed Changer & Remover plugin <= 0.2 versions.
CVE-2023-25794	Nooz Project Nooz	Med	0.38	5.9	0.00	Mar 20, 2023	Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Mighty Digital Nooz plugin <= 1.6.0 versions.
CVE-2023-25064	Wp Htpasswd Project Wp Htpasswd	Med	0.38	5.9	0.00	Mar 20, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Matteo Candura WP htpasswd plugin <= 1.7 versions.
CVE-2023-24381	Apusthemes Advanced Social Pixel	Med	0.38	5.9	0.00	Mar 20, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in NsThemes Advanced Social Pixel plugin <= 2.1.1 versions.
CVE-2022-47171	WordPress IP Vault – WP Firewall	Med	0.38	5.9	0.00	Mar 14, 2023	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paul C. Schroeder IP Vault – WP Firewall plugin <= 1.1 versions.

CVE-2023-25059MedApr 7, 2023
avalex
avalex
risk 0.38cvss 5.9epss 0.01
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in avalex GmbH avalex – Automatically secure legal texts plugin <= 3.0.3 versions.
CVE-2023-24402MedApr 7, 2023
Wpbookingsystem
Wp Booking System
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Veribo, Roland Murg WP Booking System – Booking Calendar plugin <= 2.0.18 versions.
CVE-2023-25062MedApr 6, 2023
Pinpoint
Pinpoint Booking System
risk 0.38cvss 5.9epss 0.01
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PINPOINT.WORLD Pinpoint Booking System plugin <= 2.9.9.2.8 versions.
CVE-2023-24396MedApr 6, 2023
E4J S.R.L.
Vikbooking Hotel Booking Engine & Pms (wordpress Plugin)
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in E4J s.R.L. VikBooking Hotel Booking Engine & PMS plugin <= 1.5.11 versions.
CVE-2023-24387MedApr 6, 2023
Wpdevart
Organization Chart
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPdevart Organization chart plugin <= 1.4.4 versions.
CVE-2023-24383MedApr 6, 2023
Kibokolabs
Namaste\! Lms
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Namaste! LMS plugin <= 2.5.9.1 versions.
CVE-2023-24004MedApr 6, 2023
WordPress
Image and Video Lightbox, Image PopUp
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPdevart Image and Video Lightbox, Image PopUp plugin <= 2.1.5 versions.
CVE-2023-24002MedApr 6, 2023
WordPress
YouTube Embed, Playlist and Popup by WpDevArt
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPdevart YouTube Embed, Playlist and Popup by WpDevArt plugin <= 2.6.3 versions.
CVE-2023-24006MedApr 6, 2023
Linksoftwarellc
Wp Terms Popup
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Link Software LLC WP Terms Popup plugin <= 2.6.0 versions.
CVE-2023-24001MedApr 6, 2023
Ylefebvre
Modal Dialog
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Yannick Lefebvre Modal Dialog plugin <= 3.5.9 versions.
CVE-2023-23998MedApr 6, 2023
E4J S.R.L.
VikRentCar Car Rental Management System
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in E4J s.R.L. VikRentCar Car Rental Management System plugin <= 1.3.0 versions.
CVE-2023-23996MedApr 6, 2023
Properfraction
Profilepress
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in ProfilePress Membership Team ProfilePress plugin <= 4.5.3 versions.
CVE-2023-23980MedApr 6, 2023
Mailoptin
Mailoptin
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MailOptin Popup Builder Team MailOptin plugin <= 1.2.54.0 versions.
CVE-2023-23987MedApr 6, 2023
Wpeverest
User Registration
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPEverest User Registration plugin <= 2.3.0 versions.
CVE-2023-23972MedApr 6, 2023
Wpdevart
Social Like Box And Page
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Smplug-in Social Like Box and Page by WpDevArt plugin <= 0.8.39 versions.
CVE-2023-23971MedApr 6, 2023
Codepeople
Wp Time Slots Booking Form
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CodePeople WP Time Slots Booking Form plugin <= 1.1.81 versions.
CVE-2023-23982MedApr 6, 2023
Wpfrom Email Project
Wpfrom Email
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPGear.Pro WPFrom Email plugin <= 1.8.8 versions.
CVE-2023-23981MedApr 6, 2023
Quantumcloud
Conversational Forms For Chatbot
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in QuantumCloud Conversational Forms for ChatBot plugin <= 1.1.6 versions.
CVE-2023-23870MedApr 4, 2023
Wpdevart
Responsive Vertical Icon Menu
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in wpdevart Responsive Vertical Icon Menu plugin <= 1.5.8 versions.
CVE-2023-23878MedApr 4, 2023
Weplugins
Wp Maps
risk 0.38cvss 5.9epss 0.00
Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in flippercode WordPress Plugin for Google Maps – WP MAPS plugin <= 4.3.9 versions.
CVE-2023-23821MedApr 4, 2023
Marcin Pietrzak
Interactive Polish Map
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Marcin Pietrzak Interactive Polish Map plugin <= 1.2 versions.
CVE-2023-26529MedApr 3, 2023
Dupeoff.com
Dupeoff
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in DupeOff.Com DupeOff plugin <= 1.6 versions.
CVE-2023-23675MedMar 30, 2023
Catchsquare
Wp Smart Preloader
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Catchsquare WP Smart Preloader plugin <= 1.15 versions.
CVE-2022-47613MedMar 29, 2023
Quantumcloud
AI ChatBot
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in QuantumCloud AI ChatBot plugin <= 4.3.0 versions.
CVE-2022-47610MedMar 29, 2023
Mrdigital
Simple Image Popup
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Mr Digital Simple Image Popup plugin <= 1.3.6 versions.
CVE-2022-47607MedMar 29, 2023
Usersnap
Usersnap
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Usersnap plugin <= 4.16 versions.
CVE-2022-47596MedMar 29, 2023
Jeffrey Wp
Media Library Categories
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Jeffrey-WP Media Library Categories plugin <= 1.9.9 versions.
CVE-2022-47438MedMar 29, 2023
Wpdevart
Booking Calendar
risk 0.38cvss 5.9epss 0.00
Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in WpDevArt Booking calendar, Appointment Booking System plugin <= 3.2.3 versions.
CVE-2023-25704MedMar 28, 2023
Wpmart
Interactive Svg Image Map Builder
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Mehjabin Orthi Interactive SVG Image Map Builder plugin <= 1.0 versions.
CVE-2022-47170MedMar 28, 2023
Unlimited Elements
Unlimited Elements For Elementor
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 1.5.48 versions.
CVE-2022-46863MedMar 28, 2023
Fullworks
Quick Event Manager
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Event Manager plugin <= 9.6.4 versions.
CVE-2023-22707MedMar 27, 2023
Wpsoul
Greenshift
risk 0.38cvss 5.9epss 0.00
Auth. (author+) Cross-Site Scripting (XSS) vulnerability in Wpsoul Greenshift – animation and page builder blocks plugin <= 4.9.9 versions.
CVE-2023-26008MedMar 23, 2023
WordPress
Top 10
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ajay D'Souza Top 10 – Popular posts plugin for WordPress plugin <= 3.2.4 versions.
CVE-2023-25992MedMar 23, 2023
Cminds
Cm Answers
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CreativeMindsSolutions CM Answers plugin <= 3.1.9 versions.
CVE-2023-25456MedMar 23, 2023
Klaviyo
Klaviyo
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Klaviyo, Inc. Klaviyo plugin <= 3.0.7 versions.
CVE-2023-23707MedMar 23, 2023
Awsm
Embed Any Document
risk 0.38cvss 5.9epss 0.00
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), Unrestricted Upload of File with Dangerous Type vulnerability in Awsm Innovations Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files allows Stored XSS via upload of SVG and HTML…
CVE-2022-47173MedMar 23, 2023
Advancedformintegration
Advanced Form Integration
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in nasirahmed Connect Contact Form 7, WooCommerce To Google Sheets & Other Platforms – Advanced Form Integration plugin <= 1.62.0 versions.
CVE-2023-23722MedMar 23, 2023
Winwar
Wp Ebay Product Feeds
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Winwar Media WP eBay Product Feeds plugin <= 3.3.1 versions.
CVE-2022-47589MedMar 23, 2023
Thisfunctional
Ctt Expresso Para Woocommerce
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in this.Functional CTT Expresso para WooCommerce plugin <= 3.2.11 versions.
CVE-2023-22716MedMar 23, 2023
OOPSpam
Oopspam Anti Spam
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Cross-Site Scripting vulnerability in OOPSpam OOPSpam Anti-Spam plugin <= 1.1.35 versions.
CVE-2023-22715MedMar 23, 2023
WordPress
WP-CommentNavi
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Lester 'GaMerZ' Chan WP-CommentNavi plugin <= 1.12.1 versions.
CVE-2023-28422MedMar 23, 2023
Mage People
Event Manager and Tickets Selling Plugin for WooCommerce
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in MagePeople Team Event Manager and Tickets Selling Plugin for WooCommerce <= 3.8.6. versions.
CVE-2023-23718MedMar 20, 2023
Page Loading Effects Project
Page Loading Effects
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Esstat17 Page Loading Effects plugin <= 2.0.0 versions.
CVE-2023-22680MedMar 20, 2023
Altanic
No API Amazon Affiliate
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Altanic No API Amazon Affiliate plugin <= 4.2.2 versions.
CVE-2023-22679MedMar 20, 2023
Wp Better Emails Project
Wp Better Emails
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Nicolas Lemoine WP Better Emails plugin <= 0.4 versions.
CVE-2023-25795MedMar 20, 2023
WordPress
Feed Changer & Remover
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in WP-master.Ir Feed Changer & Remover plugin <= 0.2 versions.
CVE-2023-25794MedMar 20, 2023
Nooz Project
Nooz
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Mighty Digital Nooz plugin <= 1.6.0 versions.
CVE-2023-25064MedMar 20, 2023
Wp Htpasswd Project
Wp Htpasswd
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Matteo Candura WP htpasswd plugin <= 1.7 versions.
CVE-2023-24381MedMar 20, 2023
Apusthemes
Advanced Social Pixel
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in NsThemes Advanced Social Pixel plugin <= 2.1.1 versions.
CVE-2022-47171MedMar 14, 2023
WordPress
IP Vault – WP Firewall
risk 0.38cvss 5.9epss 0.00
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paul C. Schroeder IP Vault – WP Firewall plugin <= 1.1 versions.

Page 482 of 805