Filtered by CWE-79
Total 34410 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-24403 1 Wpforthewin 1 Bbpress Voting 2025-02-19 5.9 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP For The Win bbPress Voting plugin <= 2.1.11.0 versions.
CVE-2023-24374 1 Material Design Icons For Page Builders Project 1 Material Design Icons For Page Builders 2025-02-19 6.5 Medium
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Photon WP Material Design Icons for Page Builders plugin <= 1.4.2 versions.
CVE-2023-24402 1 Wpbookingsystem 1 Wp Booking System 2025-02-19 5.9 Medium
Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Veribo, Roland Murg WP Booking System – Booking Calendar plugin <= 2.0.18 versions.
CVE-2023-25049 1 Implecode 1 Ecommerce Product Catalog 2025-02-19 5.9 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in impleCode eCommerce Product Catalog Plugin for WordPress plugin <= 3.3.4 versions.
CVE-2023-25712 1 Wp-buddy 1 Google Analytics Opt-out 2025-02-19 5.9 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP-Buddy Google Analytics Opt-Out plugin <= 2.3.4 versions.
CVE-2023-25705 1 Goprayer 1 Wp Prayer 2025-02-19 5.9 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Go Prayer WP Prayer plugin <= 1.9.6 versions.
CVE-2023-28781 1 Cimatti 1 Wordpress Contact Forms 2025-02-19 7.1 High
Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Cimatti Consulting WordPress Contact Forms by Cimatti plugin <= 1.5.4 versions.
CVE-2023-28789 1 Cimatti 1 Wordpress Contact Forms 2025-02-19 7.1 High
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Cimatti Consulting WordPress Contact Forms by Cimatti plugin <= 1.5.4 versions.
CVE-2022-44625 1 Cyclodev 1 Wp Notify 2025-02-19 4.8 Medium
Auth. (admin+) Stored Cross-Site Scripting') vulnerability in Zephilou Cyklodev WP Notify plugin <= 1.2.1 versions.
CVE-2022-44735 1 Wp Clictracker Project 1 Wp Clictracker 2025-02-19 4.8 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gus Sevilla WP Clictracker plugin <= 1.0.5 versions.
CVE-2022-44743 1 Blueglass 1 Jobs For Wordpress 2025-02-19 6.5 Medium
Auth. (author+) Stored Cross-Site Scripting (XSS) vulnerability in BlueGlass Jobs for WordPress plugin <= 2.5.11.2 versions.
CVE-2023-23710 1 Miniorange 1 Wordpress Social Login And Register \(discord\, Google\, Twitter\, Linkedin\) 2025-02-19 5.9 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in miniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin <= 7.5.14 versions.
CVE-2023-25792 1 Wp Open Social Project 1 Wp Open Social 2025-02-19 5.9 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in XiaoMac WP Open Social plugin <= 5.0 versions.
CVE-2023-25797 1 Vslider Multi Image Slider Project 1 Vslider Multi Image Slider 2025-02-19 5.9 Medium
Auth. Stored Cross-Site Scripting (XSS) vulnerability in Mr.Vibe vSlider Multi Image Slider for WordPress plugin <= 4.1.2 versions.
CVE-2023-25796 1 Wp Baidu Submit Project 1 Wp Baidu Submit 2025-02-19 5.9 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Include WP BaiDu Submit plugin <= 1.2.1 versions.
CVE-2023-22713 1 Wpdownloadmanager 1 Gutenberg Blocks For Wordpress Download Manager 2025-02-19 6.5 Medium
Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in WordPress Download Manager Gutenberg Blocks by WordPress Download Manager plugin <= 2.1.8 versions.
CVE-2023-23708 1 Themeisle 1 Visualizer 2025-02-19 6.5 Medium
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Themeisle Visualizer: Tables and Charts Manager for WordPress plugin <= 3.9.4 versions.
CVE-2023-26017 1 Blueglass 1 Jobs For Wordpress 2025-02-19 5.9 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in BlueGlass Jobs for WordPress plugin <= 2.5.10.2 versions.
CVE-2023-25021 1 Fareharbor 1 Fareharbor 2025-02-19 5.9 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in FareHarbor FareHarbor for WordPress plugin <= 3.6.6 versions.
CVE-2023-24376 1 Wp Simple Events Project 1 Wp Simple Events 2025-02-19 5.9 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Nico Graff WP Simple Events plugin <= 1.0 versions.