Archives: Reports
CVE ID:
CVE-2022-4464
WordPress Plugin
themify-portfolio-post
Vulnerability Type:
Cross-Site Scripting (XSS)
Date:
2022-12-13
The plugin contains a Cross-Site Scripting (XSS) vulnerability due to the plugin does not sanitize and escape some parameters, which makes it possible for authenticated users with a role as low as contributor to inject arbitrary web scripts into pages.
CVE ID:
CVE-2022-4465
WordPress Plugin
wp-video-lightbox
Vulnerability Type:
Cross-Site Scripting (XSS)
Date:
2022-12-13
The plugin contains a Cross-Site Scripting (XSS) vulnerability due to the plugin does not sanitize and escape some parameters, which makes it possible for authenticated users with a role as low as contributor to inject arbitrary web scripts into pages.
CVE ID:
CVE-2022-4466
WordPress Plugin
ajax-load-more
Vulnerability Type:
Cross-Site Scripting (XSS)
Date:
2022-12-13
The plugin contains a Cross-Site Scripting (XSS) vulnerability due to the plugin does not sanitize and escape some parameters, which makes it possible for authenticated users with a role as low as contributor to inject arbitrary web scripts into pages.
CVE ID:
CVE-2022-4467
WordPress Plugin
search-filter
Vulnerability Type:
Cross-Site Scripting (XSS)
Date:
2022-12-13
The plugin contains a Cross-Site Scripting (XSS) vulnerability due to the plugin does not sanitize and escape some parameters, which makes it possible for authenticated users with a role as low as contributor to inject arbitrary web scripts into pages.
CVE ID:
CVE-2022-4468
WordPress Plugin
wp-recipe-maker
Vulnerability Type:
Cross-Site Scripting (XSS)
Date:
2022-12-13
The plugin contains a Cross-Site Scripting (XSS) vulnerability due to the plugin does not sanitize and escape some parameters, which makes it possible for authenticated users with a role as low as contributor to inject arbitrary web scripts into pages.
CVE ID:
CVE-2022-4469
WordPress Plugin
simple-membership
Vulnerability Type:
Cross-Site Scripting (XSS)
Date:
2022-12-13
The plugin contains a Cross-Site Scripting (XSS) vulnerability due to the plugin does not sanitize and escape some parameters, which makes it possible for authenticated users with a role as low as contributor to inject arbitrary web scripts into pages.
CVE ID:
CVE-2022-4482
WordPress Plugin
wp-carousel-free
Vulnerability Type:
Cross-Site Scripting (XSS)
Date:
2022-12-13
The plugin contains a Cross-Site Scripting (XSS) vulnerability due to the plugin does not sanitize and escape some parameters, which makes it possible for authenticated users with a role as low as contributor to inject arbitrary web scripts into pages.
CVE ID:
CVE-2022-4483
WordPress Plugin
insert-pages
Vulnerability Type:
Cross-Site Scripting (XSS)
Date:
2022-12-13
The plugin contains a Cross-Site Scripting (XSS) vulnerability due to the plugin does not sanitize and escape some parameters, which makes it possible for authenticated users with a role as low as contributor to inject arbitrary web scripts into pages.
CVE ID:
CVE-2022-4508
WordPress Plugin
convertkit
Vulnerability Type:
Cross-Site Scripting (XSS)
Date:
2022-12-13
The plugin contains a Cross-Site Scripting (XSS) vulnerability due to the plugin does not sanitize and escape some parameters, which makes it possible for authenticated users with a role as low as contributor to inject arbitrary web scripts into pages.
CVE ID:
CVE-2022-4481
WordPress Plugin
mesmerize-companion
Vulnerability Type:
Cross-Site Scripting (XSS)
Date:
2022-12-12
The plugin contains a Cross-Site Scripting (XSS) vulnerability due to the plugin does not sanitize and escape some parameters, which makes it possible for authenticated users with a role as low as contributor to inject arbitrary web scripts into pages.
CVE ID:
CVE-2022-4470
WordPress Plugin
wp-reviews-plugin-for-google
Vulnerability Type:
Cross-Site Scripting (XSS)
Date:
2022-12-12
The plugin contains a Cross-Site Scripting (XSS) vulnerability due to the plugin does not sanitize and escape some parameters, which makes it possible for authenticated users with a role as low as contributor to inject arbitrary web scripts into pages.
CVE ID:
CVE-2022-4512
WordPress Plugin
better-font-awesome
Vulnerability Type:
Cross-Site Scripting (XSS)
Date:
2022-12-12
The plugin contains a Cross-Site Scripting (XSS) vulnerability due to the plugin does not sanitize and escape some parameters, which makes it possible for authenticated users with a role as low as contributor to inject arbitrary web scripts into pages.
CVE ID:
CVE-2022-4471
WordPress Plugin
yet-another-related-posts-plugin
Vulnerability Type:
Cross-Site Scripting (XSS)
Date:
2022-12-12
The plugin contains a Cross-Site Scripting (XSS) vulnerability due to the plugin does not sanitize and escape some parameters, which makes it possible for authenticated users with a role as low as contributor to inject arbitrary web scripts into pages.
CVE ID:
CVE-2022-4472
WordPress Plugin
simple-sitemap
Vulnerability Type:
Cross-Site Scripting (XSS)
Date:
2022-12-12
The plugin contains a Cross-Site Scripting (XSS) vulnerability due to the plugin does not sanitize and escape some parameters, which makes it possible for authenticated users with a role as low as contributor to inject arbitrary web scripts into pages.
CVE ID:
CVE-2022-4473
WordPress Plugin
widget-shortcode
Vulnerability Type:
Cross-Site Scripting (XSS)
Date:
2022-12-12
The plugin contains a Cross-Site Scripting (XSS) vulnerability due to the plugin does not sanitize and escape some parameters, which makes it possible for authenticated users with a role as low as contributor to inject arbitrary web scripts into pages.
CVE ID:
CVE-2022-4460
WordPress Plugin
codelights-shortcodes-and-widgets
Vulnerability Type:
Cross-Site Scripting (XSS)
Date:
2022-12-12
The plugin contains a Cross-Site Scripting (XSS) vulnerability due to the plugin does not sanitize and escape some parameters, which makes it possible for authenticated users with a role as low as contributor to inject arbitrary web scripts into pages.
CVE ID:
CVE-2022-4459
WordPress Plugin
wp-show-posts
Vulnerability Type:
Cross-Site Scripting (XSS)
Date:
2022-12-12
The plugin contains a Cross-Site Scripting (XSS) vulnerability due to the plugin does not sanitize and escape some parameters, which makes it possible for authenticated users with a role as low as contributor to inject arbitrary web scripts into pages.
CVE ID:
CVE-2022-4458
WordPress Plugin
amr-shortcode-any-widget
Vulnerability Type:
Cross-Site Scripting (XSS)
Date:
2022-12-12
The plugin contains a Cross-Site Scripting (XSS) vulnerability due to the plugin does not sanitize and escape some parameters, which makes it possible for authenticated users with a role as low as contributor to inject arbitrary web scripts into pages.
CVE ID:
CVE-2022-4453
WordPress Plugin
interactive-3d-flipbook-powered-physics-engine
Vulnerability Type:
Cross-Site Scripting (XSS)
Date:
2022-12-12
The plugin contains a Cross-Site Scripting (XSS) vulnerability due to the plugin does not sanitize and escape some parameters, which makes it possible for authenticated users with a role as low as contributor to inject arbitrary web scripts into pages.
CVE ID:
CVE-2022-4431
WordPress Plugin
woocommerce-currency-switcher
Vulnerability Type:
Cross-Site Scripting (XSS)
Date:
2022-12-12
The plugin contains a Cross-Site Scripting (XSS) vulnerability due to the plugin does not sanitize and escape some parameters, which makes it possible for authenticated users with a role as low as contributor to inject arbitrary web scripts into pages.
CVE ID:
CVE-2022-4449
WordPress Plugin
page-scroll-to-id
Vulnerability Type:
Cross-Site Scripting (XSS)
Date:
2022-12-11
The plugin contains a Cross-Site Scripting (XSS) vulnerability due to the plugin does not sanitize and escape some parameters, which makes it possible for authenticated users with a role as low as contributor to inject arbitrary web scripts into pages.
CVE ID:
CVE-2022-4448
WordPress Plugin
give
Vulnerability Type:
Cross-Site Scripting (XSS)
Date:
2022-12-11
The plugin contains a Cross-Site Scripting (XSS) vulnerability due to the plugin does not sanitize and escape some parameters, which makes it possible for authenticated users with a role as low as contributor to inject arbitrary web scripts into pages.
CVE ID:
CVE-2022-4451
WordPress Plugin
sassy-social-share
Vulnerability Type:
Cross-Site Scripting (XSS)
Date:
2022-12-11
The plugin contains a Cross-Site Scripting (XSS) vulnerability due to the plugin does not sanitize and escape some parameters, which makes it possible for authenticated users with a role as low as contributor to inject arbitrary web scripts into pages.
CVE ID:
CVE-2022-4476
WordPress Plugin
download-manager
Vulnerability Type:
Cross-Site Scripting (XSS)
Date:
2022-12-11
The plugin contains a Cross-Site Scripting (XSS) vulnerability due to the plugin does not sanitize and escape some parameters, which makes it possible for authenticated users with a role as low as contributor to inject arbitrary web scripts into pages.
CVE ID:
CVE-2022-4507
WordPress Plugin
real-cookie-banner
Vulnerability Type:
Cross-Site Scripting (XSS)
Date:
2022-12-11
The plugin contains a Cross-Site Scripting (XSS) vulnerability due to the plugin does not sanitize and escape some parameters, which makes it possible for authenticated users with a role as low as contributor to inject arbitrary web scripts into pages.