CVE Vulnerability Catalog

The Ayo Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'color' parameter of the ayo_action shortcode in all versions up to and including 0.2. This allows authenticated attackers with Contributor-level access or higher to inject arbitrary web scripts that execute when a user accesses an affected page.

The WPLG Default Mail From plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `$_SERVER['PHP_SELF']` variable in all versions up to and including 1.0.0. This is due to insufficient input sanitization and output escaping. It allows unauthenticated attackers to inject arbitrary web scripts that execute if they can trick a user into performing an action such as clicking a link.

The Simple AL Slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `$_SERVER['PHP_SELF']` variable in all versions up to and including 1.2.10 due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary web scripts that execute if they can trick a user into performing an action such as clicking a link.

The Category Dropdown List plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `$_SERVER['PHP_SELF']` variable in all versions up to and including 1.0. This is due to insufficient input sanitization and output escaping. It allows unauthenticated attackers to inject arbitrary web scripts that execute if they can trick a user into performing an action such as clicking a link.

The Like DisLike Voting plugin for WordPress (all versions up to and including 1.0.1) is vulnerable to Reflected Cross-Site Scripting (XSS) via the `$_SERVER['PHP_SELF']` variable due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary scripts into pages that execute if a user is tricked into clicking a link.

The Complag plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `$_SERVER['PHP_SELF']` variable in all versions up to and including 1.0.2. This is due to insufficient input sanitization and output escaping. It allows unauthenticated attackers to inject arbitrary web scripts that execute if they can trick a user into performing an action such as clicking a link.

The App Landing Template Blocks for WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'atvc_video_play' shortcode in all versions up to and including 2.0.2. Authenticated attackers with Contributor-level access or higher can inject arbitrary scripts that execute when a user visits a page.

The BuddyTask plugin for WordPress (all versions up to and including 1.3.0) is vulnerable to unauthorized access and modification of data due to a missing capability check on multiple AJAX endpoints. This allows authenticated attackers with Subscriber-level access and above to view, create, modify, and delete task boards belonging to any BuddyPress group, including private and hidden groups they are not members of.

The Animated Pixel Marquee Creator plugin for WordPress is vulnerable to Cross-Site Request Forgery via the 'marquee' parameter in all versions up to, and including, 1.0.0. Missing nonce validation on the marquee deletion function allows an unauthenticated attacker to delete arbitrary marquees if they trick a site administrator into clicking a crafted link.

The SimplyConvert plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'simplyconvert_hash' option in all versions up to and including 1.0. Authenticated attackers with administrator-level access can inject arbitrary scripts that execute when a user accesses a page.

The URL Media Uploader plugin for WordPress in versions up to and including 1.0.1 is vulnerable to unauthorized safe file uploads due to a missing capability check in the `url_media_uploader_url_upload_ajax_handler()` function. This allows authenticated attackers with Contributor-level access and above to upload safe media files.

The DebateMaster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the color options in the plugin settings in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This allows authenticated attackers with Administrator-level access and above to inject arbitrary web scripts.

The Bold Timeline Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in the 'bold_timeline_group' shortcode in all versions up to and including 1.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

The WP Dropzone plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'callback' shortcode attribute in versions up to and including 1.1.1. Insufficient input sanitization and output escaping on user-supplied attributes allow evaluation as JavaScript via `new Function()`. Authenticated attackers with Contributor-level access or above can inject arbitrary web scripts that execute when a user accesses an injected page.

The 评论小秘书 plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `$_SERVER['PHP_SELF']` variable in all versions up to and including 1.3.2. This is due to insufficient input sanitization and output escaping on the `$_SERVER['PHP_SELF']` variable in the plugin's settings page. It allows unauthenticated attackers to inject arbitrary web scripts that execute if they can trick a user into performing an action such as clicking a link.

The Purchase and Expense Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.2. Missing nonce validation on the 'sup_pt_handle_deletion' function allows an unauthenticated attacker to delete arbitrary purchase records if they trick a site administrator into clicking a crafted link.

The Contact Form 7 with ChatWork plugin for WordPress in versions up to and including 1.1.0 is vulnerable to Stored Cross-Site Scripting via the 'api_token' and 'roomid' settings due to insufficient input sanitization and output escaping. This allows authenticated attackers with administrator-level access to inject arbitrary web scripts that execute when a user visits the settings page. This only affects multi-site installations and installations where `unfiltered_html` has been disabled.

The TWW Protein Calculator plugin for WordPress in versions up to and including 1.0.24 is vulnerable to Stored Cross-Site Scripting via the 'Header' setting due to insufficient input sanitization and output escaping. This allows authenticated attackers with administrator-level access to inject arbitrary web scripts that execute when a user visits the injected page. This only affects multi-site installations and installations where `unfiltered_html` has been disabled.

The Reviews Sorted plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'space' parameter of the [reviews-slider] shortcode in all versions up to and including 2.4.2 due to insufficient input sanitization and output escaping. This allows authenticated attackers with Contributor-level access or above to inject arbitrary web scripts that execute when a user accesses an injected page.

The Paypal Payment Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'buttom_image' parameter of the [paypal-shortcode] shortcode in all versions up to and including 1.01. Authenticated attackers with Contributor-level access or higher can inject arbitrary scripts that execute when a user accesses a page.