Vendor CVEs

WordPress

All CVEs

40,002 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2022-3839	WordPress Analytics for WP	Med	0.31	4.8	0.01	Nov 28, 2022	The Analytics for WP WordPress plugin through 1.5.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in…
CVE-2022-3834	WordPress Google Forms	Med	0.31	4.8	0.01	Nov 28, 2022	The Google Forms WordPress plugin through 0.95 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite…
CVE-2022-3833	Thematosoup Fancier Author Box	Med	0.31	4.8	0.01	Nov 28, 2022	The Fancier Author Box by ThematoSoup WordPress plugin through 1.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for…
CVE-2022-3831	WordPress Recaptcha	Med	0.31	4.8	0.01	Nov 28, 2022	The reCAPTCHA WordPress plugin through 1.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite…
CVE-2022-3828	WordPress Video Thumbnails	Med	0.31	4.8	0.01	Nov 28, 2022	The Video Thumbnails WordPress plugin through 2.12.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in…
CVE-2022-3824	WordPress Wp Admin UI Customize	Med	0.31	4.8	0.01	Nov 28, 2022	The WP Admin UI Customize WordPress plugin before 1.5.13 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in…
CVE-2022-3823	WordPress Beautiful Cookie Consent Banner	Med	0.31	4.8	0.00	Nov 28, 2022	The Beautiful Cookie Consent Banner WordPress plugin before 2.9.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for…
CVE-2022-3822	WordPress Donations Via Paypal	Med	0.31	4.8	0.01	Nov 28, 2022	The Donations via PayPal WordPress plugin before 1.9.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in…
CVE-2022-3610	WordPress Jeeng Push Notifications	Med	0.31	4.8	0.01	Nov 28, 2022	The Jeeng Push Notifications WordPress plugin before 2.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example…
CVE-2022-3601	WordPress Image Hover Effects Css3	Med	0.31	4.8	0.00	Nov 28, 2022	The Image Hover Effects Css3 WordPress plugin through 4.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in…
CVE-2022-2983	WordPress Salat Times	Med	0.31	4.8	0.01	Nov 28, 2022	The Salat Times WordPress plugin before 3.2.2 does not sanitize and escapes its settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVE-2022-3753	WordPress Evaluate	Med	0.31	4.8	0.01	Nov 21, 2022	The Evaluate WordPress plugin through 1.0 does not sanitize and escapes some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example, in multisite…
CVE-2022-3618	WordPress Spacer	Med	0.31	4.8	0.01	Nov 21, 2022	The Spacer WordPress plugin before 3.0.7 does not sanitize and escapes some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example, in multisite…
CVE-2022-41643	WordPress Accessibility	Med	0.31	4.8	0.00	Nov 18, 2022	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Accessibility plugin <= 1.0.3 on WordPress.
CVE-2022-40963	WordPress WP Page Builder	Med	0.31	4.8	0.00	Nov 18, 2022	Multiple Auth. (author+) Stored Cross-Site Scripting (XSS) vulnerabilities in WP Page Builder plugin <= 1.2.6 on WordPress.
CVE-2022-43463	WordPress Custom Product Tabs for WooCommerce	Med	0.31	4.8	0.00	Nov 18, 2022	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Custom Product Tabs for WooCommerce plugin <= 1.7.9 on WordPress.
CVE-2022-44736	Chameleon Project Chameleon	Med	0.31	4.8	0.00	Nov 17, 2022	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Chameleon plugin <= 1.4.3 on WordPress.
CVE-2022-44591	WordPress Anthologize	Med	0.31	4.8	0.00	Nov 17, 2022	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Anthologize plugin <= 0.8.0 on WordPress.
CVE-2022-41315	Ezoic Ezoic	Med	0.31	4.8	0.00	Nov 17, 2022	Auth. Stored Cross-Site Scripting (XSS) vulnerability in Ezoic plugin <= 2.8.8 on WordPress.
CVE-2022-40694	WordPress News Announcement Scroll	Med	0.31	4.8	0.00	Nov 17, 2022	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in News Announcement Scroll plugin <= 8.8.8 on WordPress.
CVE-2022-3631	Digitialpixies OAuth Client	Med	0.31	4.8	0.01	Nov 14, 2022	The OAuth Client by DigitialPixies WordPress plugin through 1.1.0 does not sanitize and escapes some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for…
CVE-2022-3539	WordPress Tb Testimonials	Med	0.31	4.8	0.01	Nov 14, 2022	The Testimonials WordPress plugin before 2.7, super-testimonial-pro WordPress plugin before 1.0.8 do not sanitize and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVE-2022-3469	WordPress Wp Attachments	Med	0.31	4.8	0.01	Nov 14, 2022	The WP Attachments WordPress plugin before 5.0.5 does not sanitize and escapes some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example, in…
CVE-2022-41980	WordPress Mantenimiento web	Med	0.31	4.8	0.00	Nov 8, 2022	Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Mantenimiento web plugin <= 0.13 on WordPress.
CVE-2022-32776	WordPress Advanced Ads – Ad Manager & AdSense	Med	0.31	4.8	0.00	Nov 8, 2022	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Advanced Ads GmbH Advanced Ads – Ad Manager & AdSense plugin <= 1.31.1 on WordPress.
CVE-2022-30545	5 Anker 5 Anker Connect	Med	0.31	4.8	0.00	Nov 8, 2022	Auth. Reflected Cross-Site Scripting (XSS) vulnerability in 5 Anker Connect plugin <= 1.2.6 on WordPress.
CVE-2022-3462	WordPress Highlight Focus	Med	0.31	4.8	0.01	Nov 7, 2022	The Highlight Focus WordPress plugin through 1.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in…
CVE-2022-36428	WordPress Rock Convert	Med	0.31	4.8	0.00	Nov 3, 2022	Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Stage Rock Convert plugin <= 2.11.0 on WordPress.
CVE-2022-44586	WordPress AM-HiLi plugin	Med	0.31	4.8	0.00	Nov 2, 2022	Auth. (admin+) Stored Cross-Site Scripting (XSS) in Ayoub Media AM-HiLi plugin <= 1.0 on WordPress.
CVE-2022-44576	WordPress AgentEasy Properties	Med	0.31	4.8	0.00	Nov 2, 2022	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in AgentEasy Properties plugin <= 1.0.4 on WordPress.
CVE-2022-3441	WordPress Rock Convert	Med	0.31	4.8	0.01	Oct 31, 2022	The Rock Convert WordPress plugin before 2.11.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite…
CVE-2022-3420	WordPress Official Integration for Billingo	Med	0.31	4.8	0.01	Oct 31, 2022	The Official Integration for Billingo WordPress plugin before 3.4.0 does not sanitise and escape some of its settings, which could allow high privilege users with a role as low as Shop Manager to perform Stored Cross-Site Scripting attacks.
CVE-2022-3408	WordPress WP Word Count	Med	0.31	4.8	0.01	Oct 31, 2022	The WP Word Count WordPress plugin through 3.2.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed.
CVE-2022-3237	WordPress WP Contact Slider	Med	0.31	4.8	0.01	Oct 31, 2022	The WP Contact Slider WordPress plugin before 2.4.8 does not sanitize and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVE-2021-36858	Themepoints Super Testimonials	Med	0.31	4.8	0.00	Oct 28, 2022	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Themepoints Testimonials plugin <= 2.6 on WordPress.
CVE-2022-3392	WordPress WP Humans.txt	Med	0.31	4.8	0.01	Oct 25, 2022	The WP Humans.txt WordPress plugin through 1.0.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in…
CVE-2022-3391	Retain Retain Live Chat	Med	0.31	4.8	0.01	Oct 25, 2022	The Retain Live Chat WordPress plugin through 0.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in…
CVE-2022-3350	WordPress Contact Bank	Med	0.31	4.8	0.01	Oct 25, 2022	The Contact Bank WordPress plugin through 3.0.30 does not sanitise and escape some of its Form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in…
CVE-2022-40311	WordPress Analytics Cat	Med	0.31	4.8	0.01	Oct 21, 2022	Auth. (admin+) Stored Cross-Site Scripting (XSS) in Fatcat Apps Analytics Cat plugin <= 1.0.9 on WordPress.
CVE-2022-26375	WordPress Press Optimizer	Med	0.31	4.8	0.01	Oct 17, 2022	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Mammothology AB Press Optimizer plugin <= 1.1.1 on WordPress.
CVE-2022-3139	WordPress We’re Open!	Med	0.31	4.8	0.01	Oct 17, 2022	The We’re Open! WordPress plugin before 1.42 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite…
CVE-2022-2574	WordPress Meks Easy Social Share	Med	0.31	4.8	0.01	Oct 17, 2022	The Meks Easy Social Share WordPress plugin before 1.2.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in…
CVE-2022-2563	WordPress Tutor Lms	Med	0.31	4.8	0.01	Oct 17, 2022	The Tutor LMS WordPress plugin before 2.0.10 does not escape some course parameters, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVE-2021-36899	WordPress Asset CleanUp: Page Speed Booster	Med	0.31	4.8	0.01	Oct 11, 2022	Authenticated (admin+) Reflected Cross-Site Scripting (XSS) vulnerability in Gabe Livan's Asset CleanUp: Page Speed Booster plugin <= 1.3.8.4 at WordPress.
CVE-2022-3220	WordPress Advanced Comment Form	Med	0.31	4.8	0.01	Oct 10, 2022	The Advanced Comment Form WordPress plugin before 1.2.1 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVE-2022-3207	WordPress Simple File List	Med	0.31	4.8	0.01	Oct 10, 2022	The Simple File List WordPress plugin before 4.4.12 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in…
CVE-2022-3136	Social Rocket Social Rocket	Med	0.31	4.8	0.01	Oct 10, 2022	The Social Rocket WordPress plugin before 1.3.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite…
CVE-2022-2823	WordPress Slider, Gallery, and Carousel by MetaSlider	Med	0.31	4.8	0.01	Oct 10, 2022	The Slider, Gallery, and Carousel by MetaSlider WordPress plugin before 3.27.9 does not sanitise and escape some of its Gallery Image parameters, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html…
CVE-2022-2629	Wpdarko Top Bar	Med	0.31	4.8	0.01	Oct 10, 2022	The Top Bar WordPress plugin before 3.0.4 does not sanitise and escape some of its settings before outputting them in frontend pages, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is…
CVE-2022-2448	WordPress reSmush.it	Med	0.31	4.8	0.01	Oct 10, 2022	The reSmush.it WordPress plugin before 0.4.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when unfiltered_html is disallowed.

CVE-2022-3839MedNov 28, 2022
WordPress
Analytics for WP
risk 0.31cvss 4.8epss 0.01
The Analytics for WP WordPress plugin through 1.5.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in…
CVE-2022-3834MedNov 28, 2022
WordPress
Google Forms
risk 0.31cvss 4.8epss 0.01
The Google Forms WordPress plugin through 0.95 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite…
CVE-2022-3833MedNov 28, 2022
Thematosoup
Fancier Author Box
risk 0.31cvss 4.8epss 0.01
The Fancier Author Box by ThematoSoup WordPress plugin through 1.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for…
CVE-2022-3831MedNov 28, 2022
WordPress
Recaptcha
risk 0.31cvss 4.8epss 0.01
The reCAPTCHA WordPress plugin through 1.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite…
CVE-2022-3828MedNov 28, 2022
WordPress
Video Thumbnails
risk 0.31cvss 4.8epss 0.01
The Video Thumbnails WordPress plugin through 2.12.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in…
CVE-2022-3824MedNov 28, 2022
WordPress
Wp Admin UI Customize
risk 0.31cvss 4.8epss 0.01
The WP Admin UI Customize WordPress plugin before 1.5.13 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in…
CVE-2022-3823MedNov 28, 2022
WordPress
Beautiful Cookie Consent Banner
risk 0.31cvss 4.8epss 0.00
The Beautiful Cookie Consent Banner WordPress plugin before 2.9.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for…
CVE-2022-3822MedNov 28, 2022
WordPress
Donations Via Paypal
risk 0.31cvss 4.8epss 0.01
The Donations via PayPal WordPress plugin before 1.9.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in…
CVE-2022-3610MedNov 28, 2022
WordPress
Jeeng Push Notifications
risk 0.31cvss 4.8epss 0.01
The Jeeng Push Notifications WordPress plugin before 2.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example…
CVE-2022-3601MedNov 28, 2022
WordPress
Image Hover Effects Css3
risk 0.31cvss 4.8epss 0.00
The Image Hover Effects Css3 WordPress plugin through 4.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in…
CVE-2022-2983MedNov 28, 2022
WordPress
Salat Times
risk 0.31cvss 4.8epss 0.01
The Salat Times WordPress plugin before 3.2.2 does not sanitize and escapes its settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVE-2022-3753MedNov 21, 2022
WordPress
Evaluate
risk 0.31cvss 4.8epss 0.01
The Evaluate WordPress plugin through 1.0 does not sanitize and escapes some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example, in multisite…
CVE-2022-3618MedNov 21, 2022
WordPress
Spacer
risk 0.31cvss 4.8epss 0.01
The Spacer WordPress plugin before 3.0.7 does not sanitize and escapes some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example, in multisite…
CVE-2022-41643MedNov 18, 2022
WordPress
Accessibility
risk 0.31cvss 4.8epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Accessibility plugin <= 1.0.3 on WordPress.
CVE-2022-40963MedNov 18, 2022
WordPress
WP Page Builder
risk 0.31cvss 4.8epss 0.00
Multiple Auth. (author+) Stored Cross-Site Scripting (XSS) vulnerabilities in WP Page Builder plugin <= 1.2.6 on WordPress.
CVE-2022-43463MedNov 18, 2022
WordPress
Custom Product Tabs for WooCommerce
risk 0.31cvss 4.8epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Custom Product Tabs for WooCommerce plugin <= 1.7.9 on WordPress.
CVE-2022-44736MedNov 17, 2022
Chameleon Project
Chameleon
risk 0.31cvss 4.8epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Chameleon plugin <= 1.4.3 on WordPress.
CVE-2022-44591MedNov 17, 2022
WordPress
Anthologize
risk 0.31cvss 4.8epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Anthologize plugin <= 0.8.0 on WordPress.
CVE-2022-41315MedNov 17, 2022
Ezoic
Ezoic
risk 0.31cvss 4.8epss 0.00
Auth. Stored Cross-Site Scripting (XSS) vulnerability in Ezoic plugin <= 2.8.8 on WordPress.
CVE-2022-40694MedNov 17, 2022
WordPress
News Announcement Scroll
risk 0.31cvss 4.8epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in News Announcement Scroll plugin <= 8.8.8 on WordPress.
CVE-2022-3631MedNov 14, 2022
Digitialpixies
OAuth Client
risk 0.31cvss 4.8epss 0.01
The OAuth Client by DigitialPixies WordPress plugin through 1.1.0 does not sanitize and escapes some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for…
CVE-2022-3539MedNov 14, 2022
WordPress
Tb Testimonials
risk 0.31cvss 4.8epss 0.01
The Testimonials WordPress plugin before 2.7, super-testimonial-pro WordPress plugin before 1.0.8 do not sanitize and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVE-2022-3469MedNov 14, 2022
WordPress
Wp Attachments
risk 0.31cvss 4.8epss 0.01
The WP Attachments WordPress plugin before 5.0.5 does not sanitize and escapes some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example, in…
CVE-2022-41980MedNov 8, 2022
WordPress
Mantenimiento web
risk 0.31cvss 4.8epss 0.00
Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Mantenimiento web plugin <= 0.13 on WordPress.
CVE-2022-32776MedNov 8, 2022
WordPress
Advanced Ads – Ad Manager & AdSense
risk 0.31cvss 4.8epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Advanced Ads GmbH Advanced Ads – Ad Manager & AdSense plugin <= 1.31.1 on WordPress.
CVE-2022-30545MedNov 8, 2022
5 Anker
5 Anker Connect
risk 0.31cvss 4.8epss 0.00
Auth. Reflected Cross-Site Scripting (XSS) vulnerability in 5 Anker Connect plugin <= 1.2.6 on WordPress.
CVE-2022-3462MedNov 7, 2022
WordPress
Highlight Focus
risk 0.31cvss 4.8epss 0.01
The Highlight Focus WordPress plugin through 1.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in…
CVE-2022-36428MedNov 3, 2022
WordPress
Rock Convert
risk 0.31cvss 4.8epss 0.00
Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Stage Rock Convert plugin <= 2.11.0 on WordPress.
CVE-2022-44586MedNov 2, 2022
WordPress
AM-HiLi plugin
risk 0.31cvss 4.8epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) in Ayoub Media AM-HiLi plugin <= 1.0 on WordPress.
CVE-2022-44576MedNov 2, 2022
WordPress
AgentEasy Properties
risk 0.31cvss 4.8epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in AgentEasy Properties plugin <= 1.0.4 on WordPress.
CVE-2022-3441MedOct 31, 2022
WordPress
Rock Convert
risk 0.31cvss 4.8epss 0.01
The Rock Convert WordPress plugin before 2.11.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite…
CVE-2022-3420MedOct 31, 2022
WordPress
Official Integration for Billingo
risk 0.31cvss 4.8epss 0.01
The Official Integration for Billingo WordPress plugin before 3.4.0 does not sanitise and escape some of its settings, which could allow high privilege users with a role as low as Shop Manager to perform Stored Cross-Site Scripting attacks.
CVE-2022-3408MedOct 31, 2022
WordPress
WP Word Count
risk 0.31cvss 4.8epss 0.01
The WP Word Count WordPress plugin through 3.2.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed.
CVE-2022-3237MedOct 31, 2022
WordPress
WP Contact Slider
risk 0.31cvss 4.8epss 0.01
The WP Contact Slider WordPress plugin before 2.4.8 does not sanitize and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVE-2021-36858MedOct 28, 2022
Themepoints
Super Testimonials
risk 0.31cvss 4.8epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Themepoints Testimonials plugin <= 2.6 on WordPress.
CVE-2022-3392MedOct 25, 2022
WordPress
WP Humans.txt
risk 0.31cvss 4.8epss 0.01
The WP Humans.txt WordPress plugin through 1.0.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in…
CVE-2022-3391MedOct 25, 2022
Retain
Retain Live Chat
risk 0.31cvss 4.8epss 0.01
The Retain Live Chat WordPress plugin through 0.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in…
CVE-2022-3350MedOct 25, 2022
WordPress
Contact Bank
risk 0.31cvss 4.8epss 0.01
The Contact Bank WordPress plugin through 3.0.30 does not sanitise and escape some of its Form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in…
CVE-2022-40311MedOct 21, 2022
WordPress
Analytics Cat
risk 0.31cvss 4.8epss 0.01
Auth. (admin+) Stored Cross-Site Scripting (XSS) in Fatcat Apps Analytics Cat plugin <= 1.0.9 on WordPress.
CVE-2022-26375MedOct 17, 2022
WordPress
Press Optimizer
risk 0.31cvss 4.8epss 0.01
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Mammothology AB Press Optimizer plugin <= 1.1.1 on WordPress.
CVE-2022-3139MedOct 17, 2022
WordPress
We’re Open!
risk 0.31cvss 4.8epss 0.01
The We’re Open! WordPress plugin before 1.42 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite…
CVE-2022-2574MedOct 17, 2022
WordPress
Meks Easy Social Share
risk 0.31cvss 4.8epss 0.01
The Meks Easy Social Share WordPress plugin before 1.2.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in…
CVE-2022-2563MedOct 17, 2022
WordPress
Tutor Lms
risk 0.31cvss 4.8epss 0.01
The Tutor LMS WordPress plugin before 2.0.10 does not escape some course parameters, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVE-2021-36899MedOct 11, 2022
WordPress
Asset CleanUp: Page Speed Booster
risk 0.31cvss 4.8epss 0.01
Authenticated (admin+) Reflected Cross-Site Scripting (XSS) vulnerability in Gabe Livan's Asset CleanUp: Page Speed Booster plugin <= 1.3.8.4 at WordPress.
CVE-2022-3220MedOct 10, 2022
WordPress
Advanced Comment Form
risk 0.31cvss 4.8epss 0.01
The Advanced Comment Form WordPress plugin before 1.2.1 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVE-2022-3207MedOct 10, 2022
WordPress
Simple File List
risk 0.31cvss 4.8epss 0.01
The Simple File List WordPress plugin before 4.4.12 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in…
CVE-2022-3136MedOct 10, 2022
Social Rocket
Social Rocket
risk 0.31cvss 4.8epss 0.01
The Social Rocket WordPress plugin before 1.3.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite…
CVE-2022-2823MedOct 10, 2022
WordPress
Slider, Gallery, and Carousel by MetaSlider
risk 0.31cvss 4.8epss 0.01
The Slider, Gallery, and Carousel by MetaSlider WordPress plugin before 3.27.9 does not sanitise and escape some of its Gallery Image parameters, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html…
CVE-2022-2629MedOct 10, 2022
Wpdarko
Top Bar
risk 0.31cvss 4.8epss 0.01
The Top Bar WordPress plugin before 3.0.4 does not sanitise and escape some of its settings before outputting them in frontend pages, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is…
CVE-2022-2448MedOct 10, 2022
WordPress
reSmush.it
risk 0.31cvss 4.8epss 0.01
The reSmush.it WordPress plugin before 0.4.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when unfiltered_html is disallowed.

Page 631 of 801