CVE Catalog

A Cross-Site Request Forgery (CSRF) vulnerability exists in the WordPress amr personalise plugin, affecting versions through 2.10. This vulnerability allows attackers to trick users with higher privileges into performing actions they did not intend to.

A stored cross-site scripting vulnerability has been identified in the WordPress Post-to-Post Links plugin, affecting versions through 4.2. This issue arises from improper input sanitization during web page generation, allowing malicious users to inject scripts that are executed when other users visit the affected page.

A stored cross-site scripting vulnerability has been identified in the Nite Shortcodes WordPress plugin, affecting versions through 1.0. This issue arises from improper input sanitization during web page generation, allowing malicious actors to inject scripts that are executed when users visit the site.

A stored cross-site scripting vulnerability has been identified in the WordPress WP krpano plugin, affecting versions through 1.2.1. This issue allows attackers to inject malicious scripts that are executed when users visit the affected site.

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the WordPress Better Protected Pages plugin, affecting versions through 1.0. This vulnerability allows for Stored Cross-Site Scripting (XSS) attacks. The issue arises because the plugin does not properly validate requests, enabling attackers to trick users with higher privileges into performing actions that could lead to XSS vulnerabilities.

A stored cross-site scripting vulnerability has been identified in the Anshi Solutions Category D3 Tree plugin for WordPress, affecting versions through 1.1. This vulnerability allows attackers to inject malicious scripts that are executed when users visit the affected site.

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the PayForm WordPress plugin, affecting versions through 2.0. This vulnerability allows for Stored Cross-Site Scripting (XSS) attacks, where a malicious actor could trick users with higher privileges into performing actions that could lead to the execution of harmful scripts.

A Cross-Site Request Forgery (CSRF) vulnerability exists in the LSD Google Maps Embedder WordPress plugin, affecting versions through 1.1. This vulnerability allows attackers to trick users with higher privileges into performing actions they did not intend to.

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the WordPress Copyright Safeguard Footer Notice plugin, affecting versions through 3.0. This vulnerability allows for Stored Cross-Site Scripting (XSS) attacks. The issue arises because the plugin does not properly validate requests, enabling attackers to trick users with higher privileges into performing actions that could lead to XSS vulnerabilities.

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the WordPress CJ Custom Content plugin, specifically in versions through 2.0. This vulnerability allows for Stored Cross-Site Scripting (XSS) attacks. The issue arises because the plugin does not properly validate requests, enabling attackers to trick users with higher privileges into performing actions that could introduce malicious scripts that are stored and executed later.

A stored cross-site scripting vulnerability has been identified in the WordPress Chess Tempo Viewer plugin, affecting versions through 0.9.5. This issue allows attackers to inject malicious scripts that are executed when users visit the affected site.

A stored cross-site scripting vulnerability has been identified in the WordPress Winning Portfolio plugin, affecting versions through 1.1. This issue allows attackers to inject malicious scripts that are executed when users visit the affected site.

A stored cross-site scripting vulnerability has been identified in the WP Code Snippets WCS QR Code Generator plugin, affecting versions through 1.0. This vulnerability allows for the injection of malicious scripts that are executed when users visit the affected site.

A stored cross-site scripting vulnerability has been identified in the WordPress Rollover Tab plugin, affecting versions through 1.3.2. This issue arises from improper input sanitization during web page generation, allowing malicious scripts to be injected and executed when users visit the affected site.

A broken access control vulnerability has been identified in the WordPress Contact Form 7 Anti Spambot plugin, affecting versions through 1.0.1. This vulnerability arises from missing authorization checks, which can be exploited by users to perform actions that require higher privileges.

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Katz Web Services Debt Calculator WordPress plugin, specifically in versions through 1.0.1. This vulnerability allows attackers to trick users with higher privileges into performing actions they did not intend to.

A stored cross-site scripting vulnerability has been identified in the Eyouth Charity-Thermometer WordPress plugin, affecting versions through 1.1.2. This vulnerability allows attackers to inject malicious scripts that are executed when users visit the affected site.

A stored cross-site scripting vulnerability has been identified in the WordPress Daily Proverb plugin, affecting versions through 2.0.3. This issue allows attackers to inject malicious scripts that are executed when users visit the affected site.

A DOM-based cross-site scripting vulnerability has been identified in the WordPress Simple Vertical Timeline plugin, affecting versions through 0.1. This issue arises from improper input neutralization during web page generation, allowing malicious actors to inject and execute harmful scripts on the site.

A stored cross-site scripting vulnerability has been identified in the Shoutcast and Icecast HTML5 Web Radio Player by YesStreaming.com, affecting versions through 3.3. This vulnerability allows for improper neutralization of input during web page generation, enabling the injection of malicious scripts that could be executed when users visit the affected site.

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the WordPress Hotspots Analytics plugin, affecting versions through 4.0.12. This vulnerability allows for Stored Cross-Site Scripting (XSS) attacks, where an attacker can inject malicious scripts that are executed by users.

A Cross-Site Request Forgery (CSRF) vulnerability exists in the WordPress Custom Widget Classes plugin, specifically in versions through 1.1. This vulnerability allows attackers to trick users with higher privileges into performing actions they did not intend to.

A Cross-Site Request Forgery (CSRF) vulnerability exists in the WordPress Gallery Plugin by Nilesh Shiragave, affecting versions through 1.4. This vulnerability allows attackers to trick users with higher privileges into performing actions they did not intend to.

A stored cross-site scripting vulnerability has been identified in the WordPress Top Flash Embed plugin, specifically in versions through 0.3.4. This issue allows attackers to inject malicious scripts that are executed when users visit the affected site.

A DOM-based cross-site scripting vulnerability has been identified in the WordPress Links/Problem Reporter plugin, affecting versions through 2.6.0. This issue arises from improper input sanitization during web page generation, allowing malicious actors to inject harmful scripts that could be executed in the context of the user's browser.

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the WordPress Admin Cleanup plugin, specifically in versions through 1.0.2. This vulnerability allows for Stored Cross-Site Scripting (XSS) attacks, where an attacker can inject malicious scripts that are executed by users with higher privileges.

A DOM-based cross-site scripting vulnerability has been identified in the WordPress QR Code Generator plugin, affecting versions through 1.2.6. This issue arises from improper input sanitization during web page generation, allowing malicious actors to inject and execute harmful scripts on the site.

A DOM-based cross-site scripting vulnerability has been identified in the Jobair JB Horizontal Scroller News Ticker plugin for WordPress, affecting versions through 1.0. This vulnerability arises from improper input neutralization during web page generation, allowing malicious actors to inject and execute harmful scripts on the site.

A stored cross-site scripting vulnerability has been identified in the WordPress Data Guard plugin, affecting versions 8 and prior. This issue arises from improper input sanitization during web page generation, allowing malicious users to inject harmful scripts that are executed when the affected page is viewed.

A stored cross-site scripting vulnerability has been identified in the Strx Magic Floating Sidebar Maker plugin for WordPress, affecting versions through 1.4.1. This vulnerability arises from improper input neutralization during web page generation, allowing malicious users to inject harmful scripts that are executed when the affected page is viewed.

A stored cross-site scripting vulnerability has been identified in the WordPress Stop Comment Spam plugin, affecting versions through 0.5.3. This issue arises from improper input neutralization during web page generation, allowing malicious actors to inject harmful scripts that are executed when the affected page is viewed.

A stored cross-site scripting vulnerability has been identified in the Easy Shortcode Buttons WordPress plugin, affecting versions through 1.2. This issue arises from improper input sanitization during web page generation, allowing malicious actors to inject scripts that are executed when users visit the affected site.

A stored cross-site scripting vulnerability has been identified in the WordPress FontAwesome.io ShortCodes plugin, specifically in versions through 1.0. This issue allows attackers to inject malicious scripts that are executed when users visit the affected site.

A Cross-Site Request Forgery (CSRF) vulnerability exists in the CNZZ&51LA plugin for WordPress, affecting versions through 1.0.1. This vulnerability allows attackers to trick users with higher privileges into performing actions they did not intend to.

A Cross-Site Request Forgery (CSRF) vulnerability exists in the WordPress Category Custom Fields plugin, affecting versions through 1.0. This vulnerability allows attackers to trick users with higher privileges into performing actions they did not intend to.

A Cross-Site Request Forgery (CSRF) vulnerability exists in the WordPress WP Cookies Alert plugin, specifically in versions through 1.1.1. This vulnerability allows attackers to trick users with higher privileges into performing actions they did not intend to.

A Cross-Site Request Forgery (CSRF) vulnerability exists in the WordPress Content Security Policy Pro plugin, affecting versions through 1.3.5. This vulnerability allows attackers to trick users with higher privileges into performing actions they did not intend to.

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the WordPress More Link Modifier plugin, specifically in versions through 1.0.3. This vulnerability allows for Stored Cross-Site Scripting (XSS) attacks, where malicious scripts can be injected and executed.

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the WordPress MHR-Custom-Anti-Copy plugin, affecting versions through 2.0. This vulnerability allows for Stored Cross-Site Scripting (XSS) attacks, where an attacker can inject malicious scripts that are executed by users.

A stored cross-site scripting vulnerability has been identified in the Metaphor Widgets plugin for WordPress, affecting versions through 2.4. This issue arises from improper input sanitization during web page generation, allowing malicious scripts to be injected and executed when users visit the affected site.

A Cross-Site Request Forgery (CSRF) vulnerability exists in the WordPress Root Cookie plugin, affecting versions through 1.6. This vulnerability allows attackers to trick users with higher privileges into performing actions they did not intend to.

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the WordPress Len Slider plugin, specifically in versions through 2.0.11. This vulnerability allows for Reflected Cross-Site Scripting (XSS) attacks. The issue arises because the plugin does not properly validate requests, enabling attackers to trick users with higher privileges into performing actions that could lead to XSS vulnerabilities.

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the WordPress Custom List Table Example plugin, specifically in versions through 1.4.1. This vulnerability allows for Reflected Cross-Site Scripting (XSS) attacks. The issue arises because the plugin does not adequately protect against CSRF, potentially enabling attackers to trick users with higher privileges into performing actions that could lead to XSS vulnerabilities.

A stored cross-site scripting vulnerability has been identified in the WordPress Spiderpowa Embed PDF plugin, affecting versions through 1.0. This issue allows attackers to inject malicious scripts that are executed when users visit the affected site.

A Cross-Site Request Forgery (CSRF) vulnerability exists in the SEOReseller Partner WordPress plugin, specifically in versions through 1.3.15. This vulnerability allows attackers to trick users with higher privileges into performing actions they did not intend to.

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the WordPress WP Service Payment Form With Authorize.net plugin, affecting versions through 2.6.0. This vulnerability allows for Reflected Cross-Site Scripting (XSS) attacks.

A stored cross-site scripting vulnerability has been identified in the WordPress WP-Revive Adserver plugin, affecting versions through 2.2.1. This vulnerability allows attackers to inject malicious scripts that are executed when users visit the affected site.

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the WordPress Style Admin plugin, specifically in versions through 1.4.3. This vulnerability allows for Stored Cross-Site Scripting (XSS) attacks, where a malicious actor could trick users with higher privileges into performing actions that could lead to the execution of harmful scripts.

A Cross-Site Request Forgery (CSRF) vulnerability exists in the David Hamilton OrangeBox WordPress plugin, affecting versions through 3.0.0. This vulnerability allows attackers to trick users with higher privileges into performing actions they did not intend to.

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the WordPress WP Options Editor plugin, specifically in versions through 1.1. This vulnerability allows for privilege escalation by enabling attackers to trick users with higher privileges into performing actions they did not intend to.