Security
Headlines
HeadlinesLatestCVEs

Tag

#xss

CVE-2023-24399: WordPress Ocean Extra plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability - Patchstack

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in OceanWP Ocean Extra plugin <= 2.1.2 versions.

CVE
#xss#vulnerability#web#wordpress#auth
CVE-2023-23681: WordPress Image Hover Effects For WPBakery Page Builder plugin <= 4.0 - Cross Site Scripting (XSS) vulnerability - Patchstack

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Labib Ahmed Image Hover Effects For WPBakery Page Builder plugin <= 4.0 versions.

CVE-2023-23675: WordPress WP Smart Preloader plugin <= 1.15 - Cross Site Scripting (XSS) vulnerability - Patchstack

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Catchsquare WP Smart Preloader plugin <= 1.15 versions.

CVE-2023-23670: WordPress Fancy Comments WordPress plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability - Patchstack

Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Team Heateor Fancy Comments WordPress plugin <= 1.2.10 versions.

CVE-2023-23677: WordPress GTmetrix for WordPress plugin <= 0.4.5 - Cross Site Scripting (XSS) vulnerability - Patchstack

Reflected Cross-Site Scripting (XSS) vulnerability in GTmetrix GTmetrix for WordPress plugin <= 0.4.5 versions.

"BingBang" flaw enabled altering of Bing search results, account takeover

Categories: News Tags: bing Tags: microsoft Tags: azure Tags: takeover Tags: search Tags: results Tags: access We take a look at the BingBang flaw which allowed for search engine manipulation in Bing. (Read more...) The post "BingBang" flaw enabled altering of Bing search results, account takeover appeared first on Malwarebytes Labs.

CVE-2023-22705: WordPress Welcart e-Commerce plugin <= 2.8.10 - Cross Site Scripting (XSS) vulnerability - Patchstack

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Collne Inc. Welcart e-Commerce plugin <= 2.8.10 versions.

CVE-2022-47602: WordPress WP Table Manager plugin <= 3.5.2 - Cross Site Scripting (XSS) - Patchstack

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in JoomUnited WP Table Manager plugin <= 3.5.2 versions.

CVE-2022-47613: WordPress ChatBot plugin <= 4.3.0 - Multiple Cross Site Scripting (XSS) - Patchstack

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in QuantumCloud AI ChatBot plugin <= 4.3.0 versions.

CVE-2022-47610: WordPress Simple Image Popup plugin <= 1.3.6 - Cross Site Scripting (XSS) - Patchstack

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Mr Digital Simple Image Popup plugin <= 1.3.6 versions.