CVE Vulnerability Catalog

The FX Currency Converter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fxcc_convert' shortcode in all versions up to and including 0.2.0. Authenticated attackers with Contributor-level access or higher can inject arbitrary scripts that execute when a user visits a page.

The Divelogs Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'latestdive' shortcode in all versions up to and including 1.5. Authenticated attackers with Contributor-level access or higher can inject arbitrary scripts that execute when a user accesses a page.

The Data Visualizer plugin for WordPress up to version 1.1 is vulnerable to Stored Cross-Site Scripting via the 'visualize' shortcode. Authenticated attackers with contributor-level access or higher can inject arbitrary scripts that execute when a user accesses the page.

The GPXpress plugin for WordPress up to version 1.3 is vulnerable to Stored Cross-Site Scripting via the 'gpxpress' shortcode. Authenticated attackers with contributor-level access or higher can inject arbitrary scripts that execute when a user accesses the page.

The WP Flot plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'linechart' shortcode in all versions up to and including 0.2.2. Authenticated attackers with Contributor-level access or higher can inject arbitrary scripts that execute when a user visits a page.

The WPGancio plugin for WordPress up to version 1.12 is vulnerable to Stored Cross-Site Scripting via the 'gancio-event' shortcode. Authenticated attackers with contributor-level access or higher can inject arbitrary scripts that execute when a user accesses the page.

The Simple Nivo Slider plugin for WordPress up to version 0.5.6 is vulnerable to Stored Cross-Site Scripting via the 'id' shortcode parameter. Authenticated attackers with contributor-level access or higher can inject arbitrary scripts that execute when a user accesses the page.

The Zenost Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' and 'target' parameters in the `button` shortcode in all versions up to and including 1.0. Authenticated attackers with Contributor-level access or higher can inject arbitrary scripts that execute when a user accesses a page.

The Hide Email Address plugin for WordPress up to version 0.1 is vulnerable to Stored Cross-Site Scripting via the 'inline_css' parameter in the 'bg-hide-email-address' shortcode. Authenticated attackers with contributor-level access or higher can inject arbitrary scripts that execute when a user accesses the page.

The Flow-Flow Social Feed Stream plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the flow_flow_social_auth AJAX action in versions 3.0.0 to 4.7.5. This allows authenticated attackers with Subscriber-level access and above to modify plugin settings and store arbitrary JavaScript that executes whenever the plugin settings page is viewed.

The LS Google Map Router plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'map_type' parameter in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

The Easy Map Creator plugin for WordPress up to version 3.0.2 is vulnerable to Stored Cross-Site Scripting via the 'width' parameter. Authenticated attackers with contributor-level access or higher can inject arbitrary scripts that execute when a user accesses the page.

The VigLink SpotLight By ShortCode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'float' parameter of the 'spotlight' shortcode in all versions up to and including 1.0.a. Authenticated attackers with Contributor-level access or higher can inject arbitrary scripts that execute when a user visits a page.

The BUKAZU Search widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'shortcode' parameter of the 'bukazu_search' shortcode in versions up to and including 3.3.2. Insufficient input sanitization and output escaping on user-supplied attributes allow injection of arbitrary web scripts. Authenticated attackers with Contributor-level access or above can execute scripts when a user accesses an injected page.

The NewStatPress plugin for WordPress in versions up to and including 1.4.3 is vulnerable to Stored Cross-Site Scripting via a regex bypass in the `nsp_shortcode` function due to insufficient input sanitization and output escaping on user-supplied attributes. This allows authenticated attackers with contributor-level access and above to inject arbitrary web scripts that execute when a user visits the injected page.

The Premmerce Wishlist for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.1.10. This is due to a missing capability check on the deleteWishlist() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary wishlists.

The Foxtool All-in-One plugin for WordPress up to version 2.5.2 contains a Cross-Site Request Forgery (CSRF) vulnerability. This is due to missing or incorrect nonce validation on the foxtool_login_google() function.

The Rabbit Hole plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. Missing or incorrect nonce validation on the plugin's reset functionality allows an unauthenticated attacker to reset the plugin's settings if they trick a site administrator into clicking a crafted link; the vulnerability is exacerbated by the reset being performed via a GET request, making exploitation trivial via image tags or hyperlinks.

The IMAQ Core plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.1. This is due to missing nonce validation on the URL structure settings update functionality. This makes it possible for unauthenticated attackers to update the plugin's URL structure settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

The WP User Manager plugin for WordPress is vulnerable to Arbitrary File Deletion in all versions up to, and including, 2.9.12. This is due to insufficient validation of user-supplied file paths in the profile update functionality combined with improper handling of array inputs by PHP's filter_input() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files on the server via the 'current_user_avatar' parameter in a two-stage attack which can make remote code execution possible.