Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
19,523 results · page 120 of 391
Feb 21, 2023Easy Social Box / Page: Does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embedCVE-2022-4754 · WordPress plugins & themes · reported by WPScanMedium 5.4
The Easy Social Box / Page Plugin WordPress plugin through 4.1.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
- Product
- Easy Social Box / Page
- Affected
- up to 4.1.2
- What to do
- Affects up to 4.1.2. Update Easy Social Box / Page to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Feb 21, 2023Opening Hours: Does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embedCVE-2022-4752 · WordPress plugins & themes · reported by WPScanMedium 5.4
The Opening Hours WordPress plugin through 2.3.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
- Product
- Opening Hours
- Affected
- up to 2.3.0
- What to do
- Affects up to 2.3.0. Update Opening Hours to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Feb 21, 2023WP Responsive Testimonials Slider And Widget: Does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embedCVE-2022-4750 · WordPress plugins & themes · reported by WPScanMedium 5.4
The WP Responsive Testimonials Slider And Widget WordPress plugin through 1.5 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
- Product
- WP Responsive Testimonials Slider And Widget
- Affected
- up to 1.5
- What to do
- Affects up to 1.5. Update WP Responsive Testimonials Slider And Widget to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Feb 21, 2023WP Dark Mode: Does not validate and escape one of its shortcode attributesCVE-2022-4714 · WordPress plugins & themes · reported by WPScanMedium 5.4
The WP Dark Mode WordPress plugin before 4.0.0 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack
- Product
- WP Dark Mode
- Fixed in
- 4.0.0
- What to do
- Update WP Dark Mode to 4.0.0 or newer.
Feb 21, 2023Page Builder: Live Composer: Does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embedCVE-2022-4669 · WordPress plugins & themes · reported by WPScanMedium 5.4
The Page Builder: Live Composer WordPress plugin before 1.5.23 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
- Product
- Page Builder: Live Composer
- Fixed in
- 1.5.23
- What to do
- Update Page Builder: Live Composer to 1.5.23 or newer.
Feb 21, 2023Markup (JSON-LD) structured in schema.org: Does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embedCVE-2022-4666 · WordPress plugins & themes · reported by WPScanMedium 5.4
The Markup (JSON-LD) structured in schema.org WordPress plugin through 4.8.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
- Product
- Markup (JSON-LD) structured in schema.org
- Affected
- up to 4.8.1
- What to do
- Affects up to 4.8.1. Update Markup (JSON-LD) structured in schema.org to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Feb 21, 2023Login Logout Menu: Does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embedCVE-2022-4622 · WordPress plugins & themes · reported by WPScanMedium 5.4
The Login Logout Menu WordPress plugin through 1.3.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
- Product
- Login Logout Menu
- Affected
- up to 1.3.3
- What to do
- Affects up to 1.3.3. Update Login Logout Menu to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Feb 21, 2023Intuitive Custom Post Order: Does not check for authorization in the update-menu-order ajax actionCVE-2022-4385 · WordPress plugins & themes · reported by WPScanMedium 4.3
The Intuitive Custom Post Order WordPress plugin before 3.1.4 does not check for authorization in the update-menu-order ajax action, allowing any logged in user (with roles as low as Subscriber) to update the menu order
- Product
- Intuitive Custom Post Order
- Fixed in
- 3.1.4
- What to do
- Update Intuitive Custom Post Order to 3.1.4 or newer.
Feb 21, 2023Spectra: Does not sanitize user inputCVE-2020-36656 · WordPress plugins & themes · reported by WPScanMedium 5.4
The Spectra WordPress plugin before 1.15.0 does not sanitize user input as it reaches its style HTML attribute, allowing contributors to conduct stored XSS attacks via the plugin's Gutenberg blocks.
- Product
- Spectra
- Fixed in
- 1.15.0
- What to do
- Update Spectra to 1.15.0 or newer.
Feb 20, 2023The Borg theme before 1.1.19 for Backdrop CMS does not sufficiently sanitize path arguments that are passed in via a URL.CVE-2023-26265 · Other software · Borg Project · reported by MITREMedium 5.3
The Borg theme before 1.1.19 for Backdrop CMS does not sufficiently sanitize path arguments that are passed in via a URL. The function borg_preprocess_page in the file template.php does not properly sanitize incoming path arguments before using them.
- Product
- Borg
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbackdropcms.orggithub.com
Feb 20, 2023Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS witCVE-2023-24998 · Websites & servers · Apache Software Foundation · reported by security@apache.orgHigh 7.5
Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads. Note that, like all of the file upload limits, the new configuration option (FileUploadBase#setFileCountMax) is not enabled by default and must be explicitly configured.
- Product
- Apache Commons FileUpload
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordopenwall.comlists.apache.org
Feb 15, 2023An uspecified endpoint in the web server of the switch does not properly authenticate the user identity, and may allow downloading a config page with the passwoCVE-2023-24498 · Network & remote access · Netgear · reported by cna@cyber.gov.ilHigh 7.5
An uspecified endpoint in the web server of the switch does not properly authenticate the user identity, and may allow downloading a config page with the password to the switch in clear text.
- Product
- ProSAFE 24 Port 10/100 FS726TP
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 15, 2023LS ELECTRIC XBC-DN32U with operating system version 01.80 does not properly control access to the PLC over its internal XGT protocol.CVE-2023-22807 · Other software · LS Electric · reported by ics-cert@hq.dhs.govCritical 9.8
LS ELECTRIC XBC-DN32U with operating system version 01.80 does not properly control access to the PLC over its internal XGT protocol. An attacker could control and tamper with the PLC by sending the packets to the PLC over its XGT protocol.
- Product
- XBC-DN32U
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 15, 2023Kiwi TCMS, an open source test management system, does not impose rate limits in versions prior to 12.0.CVE-2023-25171 · Other software · kiwitcms · reported by GitHubHigh 7.5
Kiwi TCMS, an open source test management system, does not impose rate limits in versions prior to 12.0. This makes it easier to attempt denial-of-service attacks against the Password reset page. An attacker could potentially send a large number of emails if they know the email addresses of users in Kiwi TCMS. Additionally that may strain SMTP resources. Users should upgrade to v12.0 or later to receive a patch. As potential workarounds, users may install and configure a rate-limiting proxy in front of Kiwi TCMS and/or configure rate limits on their email server when possible.
- Product
- kiwi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 15, 2023Kiwi TCMS, an open source test management system, does not impose rate limits in versions prior to 12.0.CVE-2023-25156 · Other software · kiwitcms · reported by GitHubHigh 7.5
Kiwi TCMS, an open source test management system, does not impose rate limits in versions prior to 12.0. This makes it easier to attempt brute-force attacks against the login page. Users should upgrade to v12.0 or later to receive a patch. As a workaround, users may install and configure a rate-limiting proxy in front of Kiwi TCMS.
- Product
- kiwi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 15, 2023Jenkins Email Extension Plugin 2.93 and earlier does not escape, sanitize, or sandbox rendered email template output or log output generated during template renCVE-2023-25764 · Websites & servers · Jenkins Project · reported by jenkinsci-cert@googlegroups.comMedium 5.4
Jenkins Email Extension Plugin 2.93 and earlier does not escape, sanitize, or sandbox rendered email template output or log output generated during template rendering, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to create or change custom email templates.
- Product
- Jenkins Email Extension Plugin
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordopenwall.comjenkins.io
Feb 15, 2023Jenkins Email Extension Plugin 2.93 and earlier does not escape various fields included in bundled email templates, resulting in a stored cross-site scripting (CVE-2023-25763 · Websites & servers · Jenkins Project · reported by jenkinsci-cert@googlegroups.comMedium 5.4
Jenkins Email Extension Plugin 2.93 and earlier does not escape various fields included in bundled email templates, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control affected fields.
- Product
- Jenkins Email Extension Plugin
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordopenwall.comjenkins.io
Feb 15, 2023Jenkins Pipeline: Build Step Plugin 2.18 and earlier does not escape job names in a JavaScript expression used in the Pipeline Snippet Generator, resulting in aCVE-2023-25762 · Websites & servers · Jenkins Project · reported by jenkinsci-cert@googlegroups.comMedium 5.4
Jenkins Pipeline: Build Step Plugin 2.18 and earlier does not escape job names in a JavaScript expression used in the Pipeline Snippet Generator, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control job names.
- Product
- Jenkins Pipeline: Build Step Plugin
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordopenwall.comjenkins.io
Feb 15, 2023Jenkins JUnit Plugin 1166.va_436e268e972 and earlier does not escape test case class names in JavaScript expressions, resulting in a stored cross-site scriptingCVE-2023-25761 · Websites & servers · Jenkins Project · reported by jenkinsci-cert@googlegroups.comMedium 5.4
Jenkins JUnit Plugin 1166.va_436e268e972 and earlier does not escape test case class names in JavaScript expressions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control test case class names in the JUnit resources processed by the plugin.
- Product
- Jenkins JUnit Plugin
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordopenwall.comjenkins.io
Feb 13, 2023SAP CRM WebClient UI - versions WEBCUIF 748, 800, 801, S4FND 102, 103, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XCVE-2023-24525 · Network & remote access · SAP · reported by cna@sap.comMedium 4.3
SAP CRM WebClient UI - versions WEBCUIF 748, 800, 801, S4FND 102, 103, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. On successful exploitation an authenticated attacker can cause limited impact on confidentiality of the application.
- Product
- CRM (WebClient UI)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordlaunchpad.support.sap.comsap.com
Feb 13, 2023SAP S/4 HANA Map Treasury Correspondence Format Data does not perform necessary authorization check for an authenticated user, resulting in escalation of privilCVE-2023-24524 · Network & remote access · SAP · reported by cna@sap.comMedium 6.5
SAP S/4 HANA Map Treasury Correspondence Format Data does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. This could allow an attacker to delete the data with a high impact to availability.
- Product
- S/4 HANA (Map Treasury Correspondence Format Data)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordlaunchpad.support.sap.comsap.com
Feb 13, 2023SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, does not perform necessary authorization checks fCVE-2023-23854 · Network & remote access · SAP · reported by cna@sap.comLow 3.8
SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.
- Product
- NetWeaver AS ABAP and ABAP Platform
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordlaunchpad.support.sap.comsap.com
Feb 13, 2023SAP Solution Manager (System Monitoring) - version 720, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerabiliCVE-2023-23852 · Network & remote access · SAP · reported by cna@sap.comMedium 6.1
SAP Solution Manager (System Monitoring) - version 720, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
- Product
- Solution Manager
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordlaunchpad.support.sap.comsap.com
Feb 13, 2023GPT AI Power: Content Writer & ChatGPT & Image Generator & WooCommerce Product Writer & AI Training: Does not perform any kind of nonce or privilege checks before letting logged-in users modify arbitrary postsCVE-2023-0405 · WordPress plugins & themes · reported by WPScanMedium 4.3
The GPT AI Power: Content Writer & ChatGPT & Image Generator & WooCommerce Product Writer & AI Training WordPress plugin before 1.4.38 does not perform any kind of nonce or privilege checks before letting logged-in users modify arbitrary posts.
- Product
- GPT AI Power: Content Writer & ChatGPT & Image Generator & WooCommerce Product Writer & AI Training
- Fixed in
- 1.4.38
- What to do
- Update GPT AI Power: Content Writer & ChatGPT & Image Generator & WooCommerce Product Writer & AI Training to 1.4.38 or newer.
Feb 13, 2023Spotlight Social Feeds: Does not validate and escape some of its block options before outputting them back in a page/post where the block is embedCVE-2023-0379 · WordPress plugins & themes · reported by WPScanMedium 5.4
The Spotlight Social Feeds WordPress plugin before 1.4.3 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
- Product
- Spotlight Social Feeds
- Fixed in
- 1.4.3
- What to do
- Update Spotlight Social Feeds to 1.4.3 or newer.
Feb 13, 2023Lightweight Accordion: Does not validate and escape some of its block options before outputting them back in a page/post where the block is embedCVE-2023-0373 · WordPress plugins & themes · reported by WPScanMedium 5.4
The Lightweight Accordion WordPress plugin before 1.5.15 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
- Product
- Lightweight Accordion
- Fixed in
- 1.5.15
- What to do
- Update Lightweight Accordion to 1.5.15 or newer.
Feb 13, 2023Themify Portfolio Post WordPress plugin before 1.2.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post whCVE-2023-0362 · WordPress plugins & themes · reported by WPScanMedium 5.4
Themify Portfolio Post WordPress plugin before 1.2.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
- Fixed in
- 1.2.2
- What to do
- Update the plugin to 1.2.2 or newer.
Feb 13, 2023Location Weather: Does not validate and escape some of its block options before outputting them back in a page/post where the block is embedCVE-2023-0360 · WordPress plugins & themes · reported by WPScanMedium 5.4
The Location Weather WordPress plugin before 1.3.4 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
- Product
- Location Weather
- Fixed in
- 1.3.4
- What to do
- Update Location Weather to 1.3.4 or newer.
Feb 13, 2023TemplatesNext ToolKit: Does not validate some of its shortcode attributes before using them to generate an HTML tagCVE-2023-0333 · WordPress plugins & themes · reported by WPScanMedium 5.4
The TemplatesNext ToolKit WordPress plugin before 3.2.9 does not validate some of its shortcode attributes before using them to generate an HTML tag, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
- Product
- TemplatesNext ToolKit
- Fixed in
- 3.2.9
- What to do
- Update TemplatesNext ToolKit to 3.2.9 or newer.
Feb 13, 2023Easy Accept Payments for PayPal: Does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embedCVE-2023-0275 · WordPress plugins & themes · reported by WPScanMedium 5.4
The Easy Accept Payments for PayPal WordPress plugin before 4.9.10 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
- Product
- Easy Accept Payments for PayPal
- Fixed in
- 4.9.10
- What to do
- Update Easy Accept Payments for PayPal to 4.9.10 or newer.
Feb 13, 2023YaMaps for: Does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embedCVE-2023-0270 · WordPress plugins & themes · reported by WPScanMedium 5.4
The YaMaps for WordPress Plugin WordPress plugin before 0.6.26 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
- Product
- YaMaps for
- Fixed in
- 0.6.26
- What to do
- Update YaMaps for to 0.6.26 or newer.
Feb 13, 2023WP Yelp Review Slider: Does not properly sanitise and escape a parameter before using it in a SQL statementCVE-2023-0263 · WordPress plugins & themes · reported by WPScanHigh 8.8
The WP Yelp Review Slider WordPress plugin before 7.1 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscriber.
- Product
- WP Yelp Review Slider
- Fixed in
- 7.1
- What to do
- Update WP Yelp Review Slider to 7.1 or newer.
Feb 13, 2023WP Airbnb Review Slider: Does not properly sanitise and escape a parameter before using it in a SQL statementCVE-2023-0262 · WordPress plugins & themes · reported by WPScanHigh 8.8
The WP Airbnb Review Slider WordPress plugin before 3.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscriber.
- Product
- WP Airbnb Review Slider
- Fixed in
- 3.3
- What to do
- Update WP Airbnb Review Slider to 3.3 or newer.
Feb 13, 2023WP TripAdvisor Review Slider: Does not properly sanitise and escape a parameter before using it in a SQL statementCVE-2023-0261 · WordPress plugins & themes · reported by WPScanHigh 8.8
The WP TripAdvisor Review Slider WordPress plugin before 10.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscriber.
- Product
- WP TripAdvisor Review Slider
- Fixed in
- 10.8
- What to do
- Update WP TripAdvisor Review Slider to 10.8 or newer.
Feb 13, 2023WP Review Slider: Does not properly sanitise and escape a parameter before using it in a SQL statementCVE-2023-0260 · WordPress plugins & themes · reported by WPScanHigh 8.8
The WP Review Slider WordPress plugin before 12.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscriber.
- Product
- WP Review Slider
- Fixed in
- 12.2
- What to do
- Update WP Review Slider to 12.2 or newer.
Feb 13, 2023WP Google Review Slider: Does not properly sanitise and escape a parameter before using it in a SQL statementCVE-2023-0259 · WordPress plugins & themes · reported by WPScanHigh 8.8
The WP Google Review Slider WordPress plugin before 11.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscriber.
- Product
- WP Google Review Slider
- Fixed in
- 11.8
- What to do
- Update WP Google Review Slider to 11.8 or newer.
Feb 13, 2023Enable Media Replace: Does not prevent authors from uploading arbitrary files to the siteCVE-2023-0255 · WordPress plugins & themes · reported by WPScanHigh 8.8
The Enable Media Replace WordPress plugin before 4.0.2 does not prevent authors from uploading arbitrary files to the site, which may allow them to upload PHP shells on affected sites.
- Product
- Enable Media Replace
- Fixed in
- 4.0.2
- What to do
- Update Enable Media Replace to 4.0.2 or newer.
Feb 13, 2023Pinpoint Booking System: Does not validate and escape one of its shortcode attributes before using it in a SQL statementCVE-2023-0220 · WordPress plugins & themes · reported by WPScanHigh 8.8
The Pinpoint Booking System WordPress plugin before 2.9.9.2.9 does not validate and escape one of its shortcode attributes before using it in a SQL statement, which could allow any authenticated users, such as subscriber to perform SQL Injection attacks.
- Product
- Pinpoint Booking System
- Fixed in
- 2.9.9.2.9
- What to do
- Update Pinpoint Booking System to 2.9.9.2.9 or newer.
Feb 13, 2023Social Like Box and Page by WpDevArt: Does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embedCVE-2023-0177 · WordPress plugins & themes · reported by WPScanMedium 5.4
The Social Like Box and Page by WpDevArt WordPress plugin before 0.8.41 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
- Product
- Social Like Box and Page by WpDevArt
- Fixed in
- 0.8.41
- What to do
- Update Social Like Box and Page by WpDevArt to 0.8.41 or newer.
Feb 13, 2023Zoho Forms: Does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embedCVE-2023-0169 · WordPress plugins & themes · reported by WPScanMedium 5.4
The Zoho Forms WordPress plugin before 3.0.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
- Product
- Zoho Forms
- Fixed in
- 3.0.1
- What to do
- Update Zoho Forms to 3.0.1 or newer.
Feb 13, 2023Product Slider for WooCommerce by PickPlugins: Does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embedCVE-2023-0166 · WordPress plugins & themes · reported by WPScanMedium 5.4
The Product Slider for WooCommerce by PickPlugins WordPress plugin before 1.13.42 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
- Product
- Product Slider for WooCommerce by PickPlugins
- Fixed in
- 1.13.42
- What to do
- Update Product Slider for WooCommerce by PickPlugins to 1.13.42 or newer.
Feb 13, 2023Extensive VC Addons for WPBakery page builder: Does not validate a parameter passed to the php extract functionCVE-2023-0159 · WordPress plugins & themes · reported by WPScanHigh 7.5
The Extensive VC Addons for WPBakery page builder WordPress plugin before 1.9.1 does not validate a parameter passed to the php extract function when loading templates, allowing an unauthenticated attacker to override the template path to read arbitrary files from the hosts file system. This may be escalated to RCE using PHP filter chains.
- Product
- Extensive VC Addons for WPBakery page builder
- Fixed in
- 1.9.1
- What to do
- Update Extensive VC Addons for WPBakery page builder to 1.9.1 or newer.
Feb 13, 2023uTubeVideo Gallery: Does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embedCVE-2023-0151 · WordPress plugins & themes · reported by WPScanMedium 5.4
The uTubeVideo Gallery WordPress plugin before 2.0.8 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
- Product
- uTubeVideo Gallery
- Fixed in
- 2.0.8
- What to do
- Update uTubeVideo Gallery to 2.0.8 or newer.
Feb 13, 2023Simple URLs: Does not sanitise and escape some parameters before outputting them back in some pagesCVE-2023-0099 · WordPress plugins & themes · reported by WPScanMedium 6.1
The Simple URLs WordPress plugin before 115 does not sanitise and escape some parameters before outputting them back in some pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
- Product
- Simple URLs
- Fixed in
- 115
- What to do
- Update Simple URLs to 115 or newer.
Full record and what to do →NVD recordpacketstormsecurity.comwpscan.com
Feb 13, 2023Simple URLs: Does not escape some parameters before using them in various SQL statements used by AJAX actions available by any authenticated usersCVE-2023-0098 · WordPress plugins & themes · reported by WPScanHigh 8.8
The Simple URLs WordPress plugin before 115 does not escape some parameters before using them in various SQL statements used by AJAX actions available by any authenticated users, leading to a SQL injection exploitable by low privilege users such as subscriber.
- Product
- Simple URLs
- Fixed in
- 115
- What to do
- Update Simple URLs to 115 or newer.
Feb 13, 2023Customer Reviews for WooCommerce: Does not validate one of its shortcode attributeCVE-2023-0080 · WordPress plugins & themes · reported by WPScanHigh 8.8
The Customer Reviews for WooCommerce WordPress plugin before 5.16.0 does not validate one of its shortcode attribute, which could allow users with a contributor role and above to include arbitrary files via a traversal attack. This could also allow them to read non PHP files and retrieve their content. RCE could also be achieved if the attacker manage to upload a malicious image containing PHP code, and then include it via the affected attribute, on a default WP install, authors could easily achieve that given that they have the upload_file capability.
- Product
- Customer Reviews for WooCommerce
- Fixed in
- 5.16.0
- What to do
- Update Customer Reviews for WooCommerce to 5.16.0 or newer.
Feb 13, 2023Amazon JS: Does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embedCVE-2023-0075 · WordPress plugins & themes · reported by WPScanMedium 5.4
The Amazon JS WordPress plugin through 0.10 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
- Product
- Amazon JS
- Affected
- up to 0.10
- What to do
- Affects up to 0.10. Update Amazon JS to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Feb 13, 2023Judge.me Product Reviews for WooCommerce: Does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embedCVE-2023-0061 · WordPress plugins & themes · reported by WPScanMedium 5.4
The Judge.me Product Reviews for WooCommerce WordPress plugin before 1.3.21 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
- Product
- Judge.me Product Reviews for WooCommerce
- Fixed in
- 1.3.21
- What to do
- Update Judge.me Product Reviews for WooCommerce to 1.3.21 or newer.
Feb 13, 2023Responsive Gallery Grid: Does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embedCVE-2023-0060 · WordPress plugins & themes · reported by WPScanMedium 5.4
The Responsive Gallery Grid WordPress plugin before 2.3.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
- Product
- Responsive Gallery Grid
- Fixed in
- 2.3.9
- What to do
- Update Responsive Gallery Grid to 2.3.9 or newer.
Feb 13, 2023JetWidgets For Elementor: Does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embedCVE-2023-0034 · WordPress plugins & themes · reported by WPScanMedium 5.4
The JetWidgets For Elementor WordPress plugin before 1.0.14 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
- Product
- JetWidgets For Elementor
- Fixed in
- 1.0.14
- What to do
- Update JetWidgets For Elementor to 1.0.14 or newer.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.