Stored Cross-Site Scripting in TablePress Datetime Shortcode Attribute

Skrevet den af i TablePress

A table’s datetime format string was interpolated straight into an inline JavaScript command without escaping, so a value containing a quote could break out and execute script in the browser of anyone viewing the table. The format string is now passed through wp_json_encode with JSON_HEX_TAG, which escapes quotes and angle brackets.

This vulnerability affects the following application versions:

  • TablePress 3.0
  • TablePress 3.0.1
  • TablePress 3.0.2
  • TablePress 3.0.3
  • TablePress 3.0.4
  • TablePress 3.1
  • TablePress 3.1.1
  • TablePress 3.1.2
  • TablePress 3.1.3
  • TablePress 3.2
  • TablePress 3.2.1
  • TablePress 3.2.2
  • TablePress 3.2.3
  • TablePress 3.2.4

Authentication Bypass via URL Encoding in Access Governance for WordPress (AAM) URL Access Rules

Skrevet den af i Access Governance for WordPress (aka AAM)

A flaw in how Access Governance for WordPress (AAM) normalises request URLs lets an unauthenticated visitor reach a page that a URL access rule should block. Percent-encoding any character of the path (for example /prot%65cted instead of /protected) made the request miss the rule, while WordPress still resolved and served the protected content. Affects versions up to and including 7.1.0; fixed in 7.1.1.

This vulnerability affects the following application versions:

  • Access Governance for WordPress (aka AAM) 7.0.0
  • Access Governance for WordPress (aka AAM) 7.0.0-alpha.6
  • Access Governance for WordPress (aka AAM) 7.0.0-alpha.7
  • Access Governance for WordPress (aka AAM) 7.0.0-beta.1
  • Access Governance for WordPress (aka AAM) 7.0.0-rc1
  • Access Governance for WordPress (aka AAM) 7.0.0-rc2
  • Access Governance for WordPress (aka AAM) 7.0.0-rc3
  • Access Governance for WordPress (aka AAM) 7.0.1
  • Access Governance for WordPress (aka AAM) 7.0.2
  • Access Governance for WordPress (aka AAM) 7.0.3
  • Access Governance for WordPress (aka AAM) 7.0.4
  • Access Governance for WordPress (aka AAM) 7.0.5
  • Access Governance for WordPress (aka AAM) 7.0.6
  • Access Governance for WordPress (aka AAM) 7.0.7
  • Access Governance for WordPress (aka AAM) 7.0.8
  • Access Governance for WordPress (aka AAM) 7.0.9
  • Access Governance for WordPress (aka AAM) 7.0.10
  • Access Governance for WordPress (aka AAM) 7.0.11
  • Access Governance for WordPress (aka AAM) 7.1.0

Missing Authorization in Forminator Submission CSV Export

Skrevet den af i Forminator Forms

The submission export used a permission helper that did not actually restrict the caller, letting any authenticated Forminator user download entry exports belonging to forms they should not see. The export now checks the caller is allowed and stops with an explicit error when the check or the nonce fails.

This vulnerability affects the following application versions:

  • Forminator Forms 1.28.0
  • Forminator Forms 1.28.1
  • Forminator Forms 1.29.0
  • Forminator Forms 1.29.2
  • Forminator Forms 1.29.3
  • Forminator Forms 1.30.2
  • Forminator Forms 1.31.0
  • Forminator Forms 1.32.0
  • Forminator Forms 1.33.0
  • Forminator Forms 1.34.0
  • Forminator Forms 1.34.1
  • Forminator Forms 1.35.0
  • Forminator Forms 1.35.1
  • Forminator Forms 1.36.0
  • Forminator Forms 1.36.1
  • Forminator Forms 1.36.2
  • Forminator Forms 1.36.3
  • Forminator Forms 1.37.1
  • Forminator Forms 1.38.1
  • Forminator Forms 1.38.2
  • Forminator Forms 1.38.3
  • Forminator Forms 1.39.0
  • Forminator Forms 1.39.1
  • Forminator Forms 1.39.2
  • Forminator Forms 1.39.3
  • Forminator Forms 1.40.0
  • Forminator Forms 1.41.1
  • Forminator Forms 1.41.2
  • Forminator Forms 1.42.0
  • Forminator Forms 1.42.1
  • Forminator Forms 1.42.2
  • Forminator Forms 1.43.0
  • Forminator Forms 1.43.1
  • Forminator Forms 1.44
  • Forminator Forms 1.44.1
  • Forminator Forms 1.44.2
  • Forminator Forms 1.44.3
  • Forminator Forms 1.45
  • Forminator Forms 1.45.1
  • Forminator Forms 1.46.1
  • Forminator Forms 1.46.2
  • Forminator Forms 1.47
  • Forminator Forms 1.48.2
  • Forminator Forms 1.48.3
  • Forminator Forms 1.49.0

Missing Authorization in CTX Feed Plugin Installer

Skrevet den af i CTX Feed – Product Feed Manager for WooCommerce

In CTX Feed up to 6.6.11 the ‘Our Plugins’ AJAX installer checks only a nonce, never the user’s capabilities, before it downloads, installs and activates a WordPress.org plugin named in the request. Any logged-in user who can open the CTX Feed admin screens, such as a WooCommerce Shop Manager, can install and activate arbitrary plugins, which can lead to full site takeover. Sites that run CTX Feed 6.5.50 to 6.6.11 and give non-administrator staff a back-office login are at risk.

This vulnerability affects the following application versions:

  • CTX Feed – Product Feed Manager for WooCommerce 6.5.50
  • CTX Feed – Product Feed Manager for WooCommerce 6.5.51
  • CTX Feed – Product Feed Manager for WooCommerce 6.5.52
  • CTX Feed – Product Feed Manager for WooCommerce 6.5.53
  • CTX Feed – Product Feed Manager for WooCommerce 6.5.54
  • CTX Feed – Product Feed Manager for WooCommerce 6.5.55
  • CTX Feed – Product Feed Manager for WooCommerce 6.5.56
  • CTX Feed – Product Feed Manager for WooCommerce 6.5.57
  • CTX Feed – Product Feed Manager for WooCommerce 6.5.58
  • CTX Feed – Product Feed Manager for WooCommerce 6.5.59
  • CTX Feed – Product Feed Manager for WooCommerce 6.5.60
  • CTX Feed – Product Feed Manager for WooCommerce 6.5.61
  • CTX Feed – Product Feed Manager for WooCommerce 6.5.62
  • CTX Feed – Product Feed Manager for WooCommerce 6.5.63
  • CTX Feed – Product Feed Manager for WooCommerce 6.5.64
  • CTX Feed – Product Feed Manager for WooCommerce 6.5.65
  • CTX Feed – Product Feed Manager for WooCommerce 6.5.66
  • CTX Feed – Product Feed Manager for WooCommerce 6.5.67
  • CTX Feed – Product Feed Manager for WooCommerce 6.5.68
  • CTX Feed – Product Feed Manager for WooCommerce 6.5.69
  • CTX Feed – Product Feed Manager for WooCommerce 6.5.70
  • CTX Feed – Product Feed Manager for WooCommerce 6.5.71
  • CTX Feed – Product Feed Manager for WooCommerce 6.5.72
  • CTX Feed – Product Feed Manager for WooCommerce 6.5.73
  • CTX Feed – Product Feed Manager for WooCommerce 6.5.74
  • CTX Feed – Product Feed Manager for WooCommerce 6.5.75
  • CTX Feed – Product Feed Manager for WooCommerce 6.5.76
  • CTX Feed – Product Feed Manager for WooCommerce 6.5.77
  • CTX Feed – Product Feed Manager for WooCommerce 6.5.78
  • CTX Feed – Product Feed Manager for WooCommerce 6.5.79
  • CTX Feed – Product Feed Manager for WooCommerce 6.5.80
  • CTX Feed – Product Feed Manager for WooCommerce 6.5.81
  • CTX Feed – Product Feed Manager for WooCommerce 6.5.82
  • CTX Feed – Product Feed Manager for WooCommerce 6.5.83
  • CTX Feed – Product Feed Manager for WooCommerce 6.5.84
  • CTX Feed – Product Feed Manager for WooCommerce 6.5.85
  • CTX Feed – Product Feed Manager for WooCommerce 6.5.86
  • CTX Feed – Product Feed Manager for WooCommerce 6.5.87
  • CTX Feed – Product Feed Manager for WooCommerce 6.5.88
  • CTX Feed – Product Feed Manager for WooCommerce 6.6.0
  • CTX Feed – Product Feed Manager for WooCommerce 6.6.1
  • CTX Feed – Product Feed Manager for WooCommerce 6.6.2
  • CTX Feed – Product Feed Manager for WooCommerce 6.6.3
  • CTX Feed – Product Feed Manager for WooCommerce 6.6.4
  • CTX Feed – Product Feed Manager for WooCommerce 6.6.5
  • CTX Feed – Product Feed Manager for WooCommerce 6.6.6
  • CTX Feed – Product Feed Manager for WooCommerce 6.6.7
  • CTX Feed – Product Feed Manager for WooCommerce 6.6.8
  • CTX Feed – Product Feed Manager for WooCommerce 6.6.9
  • CTX Feed – Product Feed Manager for WooCommerce 6.6.10
  • CTX Feed – Product Feed Manager for WooCommerce 6.6.11

Stored Cross-Site Scripting in Speed Optimizer Bundled HTML Minifier

Skrevet den af i Speed Optimizer

The bundled HTML minifier derived its placeholder token from an md5 of the request timestamp, which an attacker could predict, and used a loose pattern when matching quoted data URIs. Content crafted to contain a matching placeholder could survive minification and be injected into the cached page, executing script for unauthenticated visitors. The placeholder now uses random_bytes and the data URI pattern is anchored to its quotes.

This vulnerability affects the following application versions:

  • Speed Optimizer 7.6.4
  • Speed Optimizer 7.6.5
  • Speed Optimizer 7.6.6
  • Speed Optimizer 7.6.7
  • Speed Optimizer 7.6.8
  • Speed Optimizer 7.7.0
  • Speed Optimizer 7.7.1
  • Speed Optimizer 7.7.2
  • Speed Optimizer 7.7.3
  • Speed Optimizer 7.7.4
  • Speed Optimizer 7.7.5
  • Speed Optimizer 7.7.6
  • Speed Optimizer 7.7.7
  • Speed Optimizer 7.7.8

Broken Access Control in King Addons Live Chat REST Endpoints

Skrevet den af i King Addons for Elementor

Five Live Chat REST routes were registered with a permission callback of __return_true, leaving them open to unauthenticated callers, and a conversation update matched only on the conversation id. An attacker could read and modify other visitors’ conversations. The routes now verify a REST nonce and the update verifies the conversation belongs to the calling visitor.

This vulnerability affects the following application versions:

  • King Addons for Elementor 51.1.44
  • King Addons for Elementor 51.1.45
  • King Addons for Elementor 51.1.46
  • King Addons for Elementor 51.1.47
  • King Addons for Elementor 51.1.49
  • King Addons for Elementor 51.1.51
  • King Addons for Elementor 51.1.52
  • King Addons for Elementor 51.1.53
  • King Addons for Elementor 51.1.54
  • King Addons for Elementor 51.1.55
  • King Addons for Elementor 51.1.56
  • King Addons for Elementor 51.1.57
  • King Addons for Elementor 51.1.58
  • King Addons for Elementor 51.1.59
  • King Addons for Elementor 51.1.60
  • King Addons for Elementor 51.1.61
  • King Addons for Elementor 51.1.62

Missing Capability Check in The Events Calendar System Information Opt-in

Skrevet den af i The Events Calendar

The system information opt-in handler verified a nonce but never checked the caller’s capability, so any logged-in user who could obtain the nonce could toggle the setting. The handler now also requires manage_options.

This vulnerability affects the following application versions:

  • The Events Calendar 4.6.10
  • The Events Calendar 4.6.10.2
  • The Events Calendar 4.6.11
  • The Events Calendar 4.6.11.2
  • The Events Calendar 4.6.12.1
  • The Events Calendar 4.6.13.1
  • The Events Calendar 4.6.14
  • The Events Calendar 4.6.14.2
  • The Events Calendar 4.6.15.1
  • The Events Calendar 4.6.16.1
  • The Events Calendar 4.6.17.1
  • The Events Calendar 4.6.18.1
  • The Events Calendar 4.6.19.1
  • The Events Calendar 4.6.20
  • The Events Calendar 4.6.20.2
  • The Events Calendar 4.6.21.1
  • The Events Calendar 4.6.22
  • The Events Calendar 4.6.22.2
  • The Events Calendar 4.6.23.1
  • The Events Calendar 4.6.24
  • The Events Calendar 4.6.24.2
  • The Events Calendar 4.6.25.1
  • The Events Calendar 4.6.26
  • The Events Calendar 4.6.26.2
  • The Events Calendar 4.7
  • The Events Calendar 4.7.0.2
  • The Events Calendar 4.7.1.1
  • The Events Calendar 4.7.2.1
  • The Events Calendar 4.7.3.1
  • The Events Calendar 4.7.4.1
  • The Events Calendar 4.8
  • The Events Calendar 4.8.0.2
  • The Events Calendar 4.8.1.1
  • The Events Calendar 4.8.2.1
  • The Events Calendar 4.9.0.1
  • The Events Calendar 4.9.0.2
  • The Events Calendar 4.9.0.4
  • The Events Calendar 4.9.1
  • The Events Calendar 4.9.1.2
  • The Events Calendar 4.9.2.1
  • The Events Calendar 4.9.3
  • The Events Calendar 4.9.3.1
  • The Events Calendar 4.9.3.3
  • The Events Calendar 4.9.4.1
  • The Events Calendar 4.9.6.1
  • The Events Calendar 4.9.7.1
  • The Events Calendar 4.9.8.1
  • The Events Calendar 4.9.9.1
  • The Events Calendar 4.9.10.1
  • The Events Calendar 4.9.11.1
  • The Events Calendar 4.9.12.1
  • The Events Calendar 4.9.13.1
  • The Events Calendar 4.9.14.1
  • The Events Calendar 5.0.0
  • The Events Calendar 5.0.0.1
  • The Events Calendar 5.0.0.3
  • The Events Calendar 5.0.1.1
  • The Events Calendar 5.0.1.2
  • The Events Calendar 5.0.2
  • The Events Calendar 5.0.2.2
  • The Events Calendar 5.0.2.3
  • The Events Calendar 5.0.3
  • The Events Calendar 5.0.3.3
  • The Events Calendar 5.1.0.1
  • The Events Calendar 5.1.0.2
  • The Events Calendar 5.1.1.1
  • The Events Calendar 5.1.1.2
  • The Events Calendar 5.1.2.1
  • The Events Calendar 5.1.2.2
  • The Events Calendar 5.1.3
  • The Events Calendar 5.1.3.1
  • The Events Calendar 5.1.4
  • The Events Calendar 5.1.4.1
  • The Events Calendar 5.1.5
  • The Events Calendar 5.1.5.1
  • The Events Calendar 5.1.6
  • The Events Calendar 5.1.6.1
  • The Events Calendar 5.2.0
  • The Events Calendar 5.2.0.1
  • The Events Calendar 5.2.1
  • The Events Calendar 5.2.1.1
  • The Events Calendar 5.2.1.2
  • The Events Calendar 5.3.0
  • The Events Calendar 5.3.0.1
  • The Events Calendar 5.3.1
  • The Events Calendar 5.3.1.1
  • The Events Calendar 5.3.1.2
  • The Events Calendar 5.3.2
  • The Events Calendar 5.3.2.1
  • The Events Calendar 5.3.2.2
  • The Events Calendar 5.4.0
  • The Events Calendar 5.4.0.1
  • The Events Calendar 5.4.0.2
  • The Events Calendar 5.4.0.3
  • The Events Calendar 5.5.0
  • The Events Calendar 5.5.0.1
  • The Events Calendar 5.5.0.2
  • The Events Calendar 5.6.0
  • The Events Calendar 5.7.0
  • The Events Calendar 5.7.1
  • The Events Calendar 5.8.0
  • The Events Calendar 5.8.1
  • The Events Calendar 5.8.2
  • The Events Calendar 5.9.0
  • The Events Calendar 5.9.1
  • The Events Calendar 5.9.2
  • The Events Calendar 5.10.0
  • The Events Calendar 5.10.1
  • The Events Calendar 5.11.0
  • The Events Calendar 5.12.0
  • The Events Calendar 5.12.1
  • The Events Calendar 5.12.2
  • The Events Calendar 5.12.3
  • The Events Calendar 5.12.4
  • The Events Calendar 5.13.0
  • The Events Calendar 5.14.0
  • The Events Calendar 5.14.0.1
  • The Events Calendar 5.14.0.2
  • The Events Calendar 5.14.0.3
  • The Events Calendar 5.14.0.4
  • The Events Calendar 5.14.1
  • The Events Calendar 5.14.2
  • The Events Calendar 5.14.2.1
  • The Events Calendar 5.15.0
  • The Events Calendar 5.15.0.1
  • The Events Calendar 5.16.0
  • The Events Calendar 5.16.1
  • The Events Calendar 5.16.1.1
  • The Events Calendar 5.16.2
  • The Events Calendar 5.16.2.1
  • The Events Calendar 5.16.3
  • The Events Calendar 5.16.3.1
  • The Events Calendar 5.16.4
  • The Events Calendar 5.16.4.1
  • The Events Calendar 6.0.0
  • The Events Calendar 6.0.0.1
  • The Events Calendar 6.0.1
  • The Events Calendar 6.0.1.1
  • The Events Calendar 6.0.2
  • The Events Calendar 6.0.3
  • The Events Calendar 6.0.3.1
  • The Events Calendar 6.0.4
  • The Events Calendar 6.0.5
  • The Events Calendar 6.0.6
  • The Events Calendar 6.0.6.1
  • The Events Calendar 6.0.6.2
  • The Events Calendar 6.0.7
  • The Events Calendar 6.0.7.1
  • The Events Calendar 6.0.8
  • The Events Calendar 6.0.9
  • The Events Calendar 6.0.10
  • The Events Calendar 6.0.11
  • The Events Calendar 6.0.12
  • The Events Calendar 6.0.13
  • The Events Calendar 6.0.13.1
  • The Events Calendar 6.1.0
  • The Events Calendar 6.1.0.1
  • The Events Calendar 6.1.0.2
  • The Events Calendar 6.1.1
  • The Events Calendar 6.1.2
  • The Events Calendar 6.1.2.1
  • The Events Calendar 6.1.2.2
  • The Events Calendar 6.1.3
  • The Events Calendar 6.1.4
  • The Events Calendar 6.2.0
  • The Events Calendar 6.2.0.1
  • The Events Calendar 6.2.1
  • The Events Calendar 6.2.2
  • The Events Calendar 6.2.2.1
  • The Events Calendar 6.2.3
  • The Events Calendar 6.2.3.1
  • The Events Calendar 6.2.3.2
  • The Events Calendar 6.2.4
  • The Events Calendar 6.2.5
  • The Events Calendar 6.2.6
  • The Events Calendar 6.2.6.1
  • The Events Calendar 6.2.7
  • The Events Calendar 6.2.8
  • The Events Calendar 6.2.8.1
  • The Events Calendar 6.2.8.2
  • The Events Calendar 6.2.9
  • The Events Calendar 6.3.0
  • The Events Calendar 6.3.1
  • The Events Calendar 6.3.2
  • The Events Calendar 6.3.3
  • The Events Calendar 6.3.3.1
  • The Events Calendar 6.3.4
  • The Events Calendar 6.3.5
  • The Events Calendar 6.3.6
  • The Events Calendar 6.3.7
  • The Events Calendar 6.4.0
  • The Events Calendar 6.4.0.1
  • The Events Calendar 6.5.0
  • The Events Calendar 6.5.0.1
  • The Events Calendar 6.5.1
  • The Events Calendar 6.5.1.1
  • The Events Calendar 6.5.1.2
  • The Events Calendar 6.5.1.3
  • The Events Calendar 6.5.1.4
  • The Events Calendar 6.5.1.5
  • The Events Calendar 6.5.1.6
  • The Events Calendar 6.5.2
  • The Events Calendar 6.6.0
  • The Events Calendar 6.6.0.1
  • The Events Calendar 6.6.0.2
  • The Events Calendar 6.6.1
  • The Events Calendar 6.6.2
  • The Events Calendar 6.6.3
  • The Events Calendar 6.6.4
  • The Events Calendar 6.6.4.1
  • The Events Calendar 6.6.4.2
  • The Events Calendar 6.7.0
  • The Events Calendar 6.7.1
  • The Events Calendar 6.8.0
  • The Events Calendar 6.8.1
  • The Events Calendar 6.8.2
  • The Events Calendar 6.8.2.1
  • The Events Calendar 6.8.3
  • The Events Calendar 6.9.0
  • The Events Calendar 6.9.1
  • The Events Calendar 6.10.0
  • The Events Calendar 6.10.1
  • The Events Calendar 6.10.1.1
  • The Events Calendar 6.10.2
  • The Events Calendar 6.10.3
  • The Events Calendar 6.11.0
  • The Events Calendar 6.11.0.1
  • The Events Calendar 6.11.1
  • The Events Calendar 6.11.2
  • The Events Calendar 6.11.2.1
  • The Events Calendar 6.13.0
  • The Events Calendar 6.13.1
  • The Events Calendar 6.13.2.1
  • The Events Calendar 6.14.0
  • The Events Calendar 6.14.1
  • The Events Calendar 6.14.2
  • The Events Calendar 6.15.0
  • The Events Calendar 6.15.0.1
  • The Events Calendar 6.15.1
  • The Events Calendar 6.15.1.1
  • The Events Calendar 6.15.2
  • The Events Calendar 6.15.3
  • The Events Calendar 6.15.4
  • The Events Calendar 6.15.5
  • The Events Calendar 6.15.6
  • The Events Calendar 6.15.7
  • The Events Calendar 6.15.8
  • The Events Calendar 6.15.9
  • The Events Calendar 6.15.10
  • The Events Calendar 6.15.11
  • The Events Calendar 6.15.12
  • The Events Calendar 6.15.12.1
  • The Events Calendar 6.15.12.2

Stored Cross-Site Scripting in Shortcodes Ultimate Box Shortcode

Skrevet den af i Shortcodes Ultimate – Content Elements

The [su_box] shortcode of Shortcodes Ultimate concatenated its max_width attribute straight into the wrapper element’s inline style attribute without any escaping. A contributor-level user could therefore close the attribute and store arbitrary HTML and JavaScript in a post, which then executes in the browser of every visitor or administrator who opens the page. Version 7.5.0 fixes this by passing max_width through the new su_sanitize_css_value() allowlist helper and escaping the result with esc_attr().

This vulnerability affects the following application versions:

  • Shortcodes Ultimate – Content Elements 5.13.2
  • Shortcodes Ultimate – Content Elements 5.13.3
  • Shortcodes Ultimate – Content Elements 7.0.0
  • Shortcodes Ultimate – Content Elements 7.0.1
  • Shortcodes Ultimate – Content Elements 7.0.2
  • Shortcodes Ultimate – Content Elements 7.0.3
  • Shortcodes Ultimate – Content Elements 7.0.4
  • Shortcodes Ultimate – Content Elements 7.0.5
  • Shortcodes Ultimate – Content Elements 7.1.0
  • Shortcodes Ultimate – Content Elements 7.1.2
  • Shortcodes Ultimate – Content Elements 7.1.3
  • Shortcodes Ultimate – Content Elements 7.1.4
  • Shortcodes Ultimate – Content Elements 7.1.5
  • Shortcodes Ultimate – Content Elements 7.1.6
  • Shortcodes Ultimate – Content Elements 7.1.7
  • Shortcodes Ultimate – Content Elements 7.1.8
  • Shortcodes Ultimate – Content Elements 7.2.1
  • Shortcodes Ultimate – Content Elements 7.2.2
  • Shortcodes Ultimate – Content Elements 7.3.0
  • Shortcodes Ultimate – Content Elements 7.3.1
  • Shortcodes Ultimate – Content Elements 7.3.2
  • Shortcodes Ultimate – Content Elements 7.3.3
  • Shortcodes Ultimate – Content Elements 7.3.4
  • Shortcodes Ultimate – Content Elements 7.3.5
  • Shortcodes Ultimate – Content Elements 7.4.0
  • Shortcodes Ultimate – Content Elements 7.4.1
  • Shortcodes Ultimate – Content Elements 7.4.2
  • Shortcodes Ultimate – Content Elements 7.4.3
  • Shortcodes Ultimate – Content Elements 7.4.4
  • Shortcodes Ultimate – Content Elements 7.4.5
  • Shortcodes Ultimate – Content Elements 7.4.6
  • Shortcodes Ultimate – Content Elements 7.4.7
  • Shortcodes Ultimate – Content Elements 7.4.8
  • Shortcodes Ultimate – Content Elements 7.4.9

Authenticated Local File Inclusion in RTMKit get_content AJAX Action

Skrevet den af i RTMKit

RTMKit’s get_content AJAX action built a PHP include path from the user-supplied ‘path’ parameter and checked only a nonce that is also exposed in the Elementor editor, so any user with Author-level access or above could use ../ sequences to include and execute arbitrary PHP files on the server. This can expose sensitive data or lead to code execution. Affects versions up to and including 2.0.2; fixed in 2.0.3.

This vulnerability affects the following application versions:

  • RTMKit 2.0.0
  • RTMKit 2.0.2
  • RTMKit 2.0.3

Cross-Site Request Forgery Leading to Code Execution in Code Snippets Import Menu

Skrevet den af i Code Snippets

Code Snippets before 2.14.0 processed snippet import uploads without checking a nonce, so a malicious page visited by a logged-in administrator could silently import attacker-supplied snippets. Because snippets are PHP code that the plugin runs, this leads to remote code execution on the site. Fixed in 2.14.0.

This vulnerability affects the following application versions:

  • Code Snippets 2.10.0
  • Code Snippets 2.10.1
  • Code Snippets 2.12.0
  • Code Snippets 2.12.1
  • Code Snippets 2.13.0
  • Code Snippets 2.13.1
  • Code Snippets 2.13.2
  • Code Snippets 2.13.3

Missing Authorization in Smart Slider 3 Image AJAX Controller

Skrevet den af i Smart Slider 3

Three AJAX actions in the image controller ran without checking the caller’s Smart Slider permissions, so any authenticated user at contributor level could edit and delete slider images. Each action now validates the corresponding smartslider_edit or smartslider_delete permission before doing any work.

This vulnerability affects the following application versions:

  • Smart Slider 3 3.4.1.6
  • Smart Slider 3 3.4.1.7
  • Smart Slider 3 3.4.1.8
  • Smart Slider 3 3.4.1.9
  • Smart Slider 3 3.4.1.10
  • Smart Slider 3 3.4.1.11
  • Smart Slider 3 3.4.1.12
  • Smart Slider 3 3.4.1.13
  • Smart Slider 3 3.4.1.14
  • Smart Slider 3 3.4.1.15
  • Smart Slider 3 3.4.1.16
  • Smart Slider 3 3.4.1.17
  • Smart Slider 3 3.5.0.8
  • Smart Slider 3 3.5.0.9
  • Smart Slider 3 3.5.0.10
  • Smart Slider 3 3.5.0.11
  • Smart Slider 3 3.5.1.0
  • Smart Slider 3 3.5.1.1
  • Smart Slider 3 3.5.1.2
  • Smart Slider 3 3.5.1.3
  • Smart Slider 3 3.5.1.4
  • Smart Slider 3 3.5.1.7
  • Smart Slider 3 3.5.1.9
  • Smart Slider 3 3.5.1.11
  • Smart Slider 3 3.5.1.12
  • Smart Slider 3 3.5.1.13
  • Smart Slider 3 3.5.1.14
  • Smart Slider 3 3.5.1.15
  • Smart Slider 3 3.5.1.16
  • Smart Slider 3 3.5.1.17
  • Smart Slider 3 3.5.1.18
  • Smart Slider 3 3.5.1.19
  • Smart Slider 3 3.5.1.21
  • Smart Slider 3 3.5.1.23
  • Smart Slider 3 3.5.1.24
  • Smart Slider 3 3.5.1.25
  • Smart Slider 3 3.5.1.26
  • Smart Slider 3 3.5.1.27
  • Smart Slider 3 3.5.1.28
  • Smart Slider 3 3.5.1.29
  • Smart Slider 3 3.5.1.30
  • Smart Slider 3 3.5.1.31
  • Smart Slider 3 3.5.1.32

Broken Access Control in Starter Templates Importer Credential Storage

Skrevet den af i Starter Templates – AI-Powered Templates

The importer routine that stores site-wide credentials did not check the caller’s capability, allowing a lower-privileged user to overwrite credentials used across the site. The routine now requires the manage_options capability before storing anything.

This vulnerability affects the following application versions:

  • Starter Templates – AI-Powered Templates 0.4.4.0
  • Starter Templates – AI-Powered Templates 0.4.4.15
  • Starter Templates – AI-Powered Templates 3.5.0
  • Starter Templates – AI-Powered Templates 3.5.2
  • Starter Templates – AI-Powered Templates 3.5.3
  • Starter Templates – AI-Powered Templates 3.5.4
  • Starter Templates – AI-Powered Templates 3.5.5
  • Starter Templates – AI-Powered Templates 4.0.7
  • Starter Templates – AI-Powered Templates 4.0.8
  • Starter Templates – AI-Powered Templates 4.0.9
  • Starter Templates – AI-Powered Templates 4.1.0
  • Starter Templates – AI-Powered Templates 4.1.1
  • Starter Templates – AI-Powered Templates 4.1.2
  • Starter Templates – AI-Powered Templates 4.1.3
  • Starter Templates – AI-Powered Templates 4.1.4
  • Starter Templates – AI-Powered Templates 4.1.5
  • Starter Templates – AI-Powered Templates 4.3.5
  • Starter Templates – AI-Powered Templates 4.3.6
  • Starter Templates – AI-Powered Templates 4.3.7
  • Starter Templates – AI-Powered Templates 4.3.8
  • Starter Templates – AI-Powered Templates 4.3.9
  • Starter Templates – AI-Powered Templates 4.4.0
  • Starter Templates – AI-Powered Templates 4.4.1
  • Starter Templates – AI-Powered Templates 4.4.2
  • Starter Templates – AI-Powered Templates 4.4.3
  • Starter Templates – AI-Powered Templates 4.4.4
  • Starter Templates – AI-Powered Templates 4.4.5
  • Starter Templates – AI-Powered Templates 4.4.6
  • Starter Templates – AI-Powered Templates 4.4.7
  • Starter Templates – AI-Powered Templates 4.4.8
  • Starter Templates – AI-Powered Templates 4.4.9
  • Starter Templates – AI-Powered Templates 4.4.10
  • Starter Templates – AI-Powered Templates 4.4.11
  • Starter Templates – AI-Powered Templates 4.4.12
  • Starter Templates – AI-Powered Templates 4.4.13
  • Starter Templates – AI-Powered Templates 4.4.14
  • Starter Templates – AI-Powered Templates 4.4.16
  • Starter Templates – AI-Powered Templates 4.4.17
  • Starter Templates – AI-Powered Templates 4.4.18
  • Starter Templates – AI-Powered Templates 4.4.19
  • Starter Templates – AI-Powered Templates 4.4.20
  • Starter Templates – AI-Powered Templates 4.4.21
  • Starter Templates – AI-Powered Templates 4.4.22
  • Starter Templates – AI-Powered Templates 4.4.23
  • Starter Templates – AI-Powered Templates 4.4.24
  • Starter Templates – AI-Powered Templates 4.4.25
  • Starter Templates – AI-Powered Templates 4.4.26
  • Starter Templates – AI-Powered Templates 4.4.27
  • Starter Templates – AI-Powered Templates 4.4.28
  • Starter Templates – AI-Powered Templates 4.4.29
  • Starter Templates – AI-Powered Templates 4.4.30
  • Starter Templates – AI-Powered Templates 4.4.31
  • Starter Templates – AI-Powered Templates 4.4.32
  • Starter Templates – AI-Powered Templates 4.4.33
  • Starter Templates – AI-Powered Templates 4.4.34
  • Starter Templates – AI-Powered Templates 4.4.35
  • Starter Templates – AI-Powered Templates 4.4.36
  • Starter Templates – AI-Powered Templates 4.4.37
  • Starter Templates – AI-Powered Templates 4.4.38
  • Starter Templates – AI-Powered Templates 4.4.39
  • Starter Templates – AI-Powered Templates 4.4.40
  • Starter Templates – AI-Powered Templates 4.4.41
  • Starter Templates – AI-Powered Templates 4.4.42
  • Starter Templates – AI-Powered Templates 4.4.43
  • Starter Templates – AI-Powered Templates 4.4.44
  • Starter Templates – AI-Powered Templates 4.4.45
  • Starter Templates – AI-Powered Templates 4.4.46
  • Starter Templates – AI-Powered Templates 4.4.47
  • Starter Templates – AI-Powered Templates 4.4.48
  • Starter Templates – AI-Powered Templates 4.4.49
  • Starter Templates – AI-Powered Templates 4.4.50
  • Starter Templates – AI-Powered Templates 4.4.51
  • Starter Templates – AI-Powered Templates 4.4.52
  • Starter Templates – AI-Powered Templates 4.5.0
  • Starter Templates – AI-Powered Templates 4.5.1
  • Starter Templates – AI-Powered Templates 4.5.2
  • Starter Templates – AI-Powered Templates 4.5.3
  • Starter Templates – AI-Powered Templates 4.5.4
  • Starter Templates – AI-Powered Templates 4.6.0
  • Starter Templates – AI-Powered Templates 4.6.1
  • Starter Templates – AI-Powered Templates 4.6.2
  • Starter Templates – AI-Powered Templates 4.6.3
  • Starter Templates – AI-Powered Templates 4.7.0
  • Starter Templates – AI-Powered Templates 4.7.1
  • Starter Templates – AI-Powered Templates 4.7.2
  • Starter Templates – AI-Powered Templates 4.7.3
  • Starter Templates – AI-Powered Templates 4.7.4

Stored Cross-Site Scripting in SiteSEO Noreferrer Link Rewriting

Skrevet den af i SiteSEO – SEO Simplified

A regular expression intended to strip the noreferrer value from link rel attributes matched the whole opening anchor tag and replaced it with a bare tag, discarding the remaining attributes and leaving malformed markup in post content. Crafted link markup could break out of the tag and execute script for anyone viewing the post. The expression now removes only the noreferrer token and leaves the rest of the tag intact.

This vulnerability affects the following application versions:

  • SiteSEO – SEO Simplified 1.1.5
  • SiteSEO – SEO Simplified 1.1.6
  • SiteSEO – SEO Simplified 1.1.8
  • SiteSEO – SEO Simplified 1.1.9
  • SiteSEO – SEO Simplified 1.2.0
  • SiteSEO – SEO Simplified 1.2.1
  • SiteSEO – SEO Simplified 1.2.2
  • SiteSEO – SEO Simplified 1.2.3
  • SiteSEO – SEO Simplified 1.2.4
  • SiteSEO – SEO Simplified 1.2.5
  • SiteSEO – SEO Simplified 1.2.6
  • SiteSEO – SEO Simplified 1.2.7

SQL Injection in PDF Invoices & Packing Slips for WooCommerce Number Tools

Skrevet den af i PDF Invoices & Packing Slips for WooCommerce

The Advanced > Numbers (Number Tools) list table in PDF Invoices & Packing Slips for WooCommerce up to 3.7.5 inserts the table_name, order, orderby and search request parameters into a SQL query without whitelisting them. A user with the manage_woocommerce capability (administrator or shop manager) can inject SQL and read arbitrary database contents.

This vulnerability affects the following application versions:

  • PDF Invoices & Packing Slips for WooCommerce 3.7.2
  • PDF Invoices & Packing Slips for WooCommerce 3.7.3
  • PDF Invoices & Packing Slips for WooCommerce 3.7.4
  • PDF Invoices & Packing Slips for WooCommerce 3.7.5
  • PDF Invoices & Packing Slips for WooCommerce 3.7.6

Broken Access Control in Ninja Forms Telemetry REST Endpoint

Skrevet den af i Ninja Forms – The Contact Form Builder

The telemetry REST route’s permission callback only required a logged-in user, so any authenticated user including a subscriber could write arbitrary data into the wp_options table. The route now requires the manage_options capability and validates and sanitises the submitted payload.

This vulnerability affects the following application versions:

  • Ninja Forms – The Contact Form Builder 3.8.19
  • Ninja Forms – The Contact Form Builder 3.8.20
  • Ninja Forms – The Contact Form Builder 3.8.21
  • Ninja Forms – The Contact Form Builder 3.8.22
  • Ninja Forms – The Contact Form Builder 3.8.23
  • Ninja Forms – The Contact Form Builder 3.8.24
  • Ninja Forms – The Contact Form Builder 3.8.25
  • Ninja Forms – The Contact Form Builder 3.8.25.1
  • Ninja Forms – The Contact Form Builder 3.9.0
  • Ninja Forms – The Contact Form Builder 3.9.1
  • Ninja Forms – The Contact Form Builder 3.9.2
  • Ninja Forms – The Contact Form Builder 3.9.2.1
  • Ninja Forms – The Contact Form Builder 3.10.0
  • Ninja Forms – The Contact Form Builder 3.10.1
  • Ninja Forms – The Contact Form Builder 3.10.2
  • Ninja Forms – The Contact Form Builder 3.10.2.1
  • Ninja Forms – The Contact Form Builder 3.10.2.2
  • Ninja Forms – The Contact Form Builder 3.10.3
  • Ninja Forms – The Contact Form Builder 3.10.4
  • Ninja Forms – The Contact Form Builder 3.10.4.1
  • Ninja Forms – The Contact Form Builder 3.11.0
  • Ninja Forms – The Contact Form Builder 3.11.1
  • Ninja Forms – The Contact Form Builder 3.11.1.1
  • Ninja Forms – The Contact Form Builder 3.12.0
  • Ninja Forms – The Contact Form Builder 3.12.1
  • Ninja Forms – The Contact Form Builder 3.12.2
  • Ninja Forms – The Contact Form Builder 3.12.2.1
  • Ninja Forms – The Contact Form Builder 3.13.0
  • Ninja Forms – The Contact Form Builder 3.13.1
  • Ninja Forms – The Contact Form Builder 3.13.2
  • Ninja Forms – The Contact Form Builder 3.13.3
  • Ninja Forms – The Contact Form Builder 3.13.4
  • Ninja Forms – The Contact Form Builder 3.14.0
  • Ninja Forms – The Contact Form Builder 3.14.1
  • Ninja Forms – The Contact Form Builder 3.14.2
  • Ninja Forms – The Contact Form Builder 3.14.3
  • Ninja Forms – The Contact Form Builder 3.14.4

Missing Capability Check in Rank Math SEO Post Metabox Redirection Option

Skrevet den af i Rank Math SEO

The post Advanced metabox exposed the Redirection option to any user who could edit a post, without checking whether that user held the redirections capability. A lower-privileged author or contributor could therefore see and use redirect controls intended for administrators. The metabox now checks the capability before rendering the option.

This vulnerability affects the following application versions:

  • Rank Math SEO 1.0.215
  • Rank Math SEO 1.0.215.1
  • Rank Math SEO 1.0.216
  • Rank Math SEO 1.0.217
  • Rank Math SEO 1.0.218
  • Rank Math SEO 1.0.219
  • Rank Math SEO 1.0.220
  • Rank Math SEO 1.0.221
  • Rank Math SEO 1.0.222
  • Rank Math SEO 1.0.223
  • Rank Math SEO 1.0.224
  • Rank Math SEO 1.0.225
  • Rank Math SEO 1.0.226
  • Rank Math SEO 1.0.227
  • Rank Math SEO 1.0.227.1
  • Rank Math SEO 1.0.228
  • Rank Math SEO 1.0.229
  • Rank Math SEO 1.0.230
  • Rank Math SEO 1.0.231
  • Rank Math SEO 1.0.232
  • Rank Math SEO 1.0.233
  • Rank Math SEO 1.0.234
  • Rank Math SEO 1.0.234.1
  • Rank Math SEO 1.0.235
  • Rank Math SEO 1.0.236
  • Rank Math SEO 1.0.237
  • Rank Math SEO 1.0.238
  • Rank Math SEO 1.0.239
  • Rank Math SEO 1.0.240
  • Rank Math SEO 1.0.241
  • Rank Math SEO 1.0.242
  • Rank Math SEO 1.0.243
  • Rank Math SEO 1.0.244
  • Rank Math SEO 1.0.245
  • Rank Math SEO 1.0.246
  • Rank Math SEO 1.0.247
  • Rank Math SEO 1.0.248
  • Rank Math SEO 1.0.249
  • Rank Math SEO 1.0.250
  • Rank Math SEO 1.0.251
  • Rank Math SEO 1.0.251.1
  • Rank Math SEO 1.0.252
  • Rank Math SEO 1.0.252.1
  • Rank Math SEO 1.0.253
  • Rank Math SEO 1.0.254
  • Rank Math SEO 1.0.255
  • Rank Math SEO 1.0.256
  • Rank Math SEO 1.0.257
  • Rank Math SEO 1.0.258
  • Rank Math SEO 1.0.259
  • Rank Math SEO 1.0.259.1
  • Rank Math SEO 1.0.260
  • Rank Math SEO 1.0.261
  • Rank Math SEO 1.0.262
  • Rank Math SEO 1.0.263
  • Rank Math SEO 1.0.264
  • Rank Math SEO 1.0.264.1
  • Rank Math SEO 1.0.265
  • Rank Math SEO 1.0.266
  • Rank Math SEO 1.0.266.1
  • Rank Math SEO 1.0.267
  • Rank Math SEO 1.0.268

Missing Authorization in The Events Calendar QR Code Modal

Skrevet den af i The Events Calendar

The QR code modal handler ran without a nonce check or a per-post capability check, so a subscriber could read and alter QR code data for events they cannot edit, including drafts. It now verifies the request nonce and requires edit_post on the target event.

This vulnerability affects the following application versions:

  • The Events Calendar 6.13.0
  • The Events Calendar 6.13.1
  • The Events Calendar 6.13.2.1
  • The Events Calendar 6.14.0
  • The Events Calendar 6.14.1
  • The Events Calendar 6.14.2
  • The Events Calendar 6.15.0
  • The Events Calendar 6.15.0.1
  • The Events Calendar 6.15.1
  • The Events Calendar 6.15.1.1
  • The Events Calendar 6.15.2
  • The Events Calendar 6.15.3
  • The Events Calendar 6.15.4
  • The Events Calendar 6.15.5
  • The Events Calendar 6.15.6
  • The Events Calendar 6.15.7
  • The Events Calendar 6.15.8
  • The Events Calendar 6.15.9

Broken Access Control in PixelYourSite Opt-in AJAX Handler

Skrevet den af i PixelYourSite – Your smart PIXEL

The opt-in AJAX handler was registered for unauthenticated visitors and passed the raw POST body straight through with no nonce and no capability check. Any unauthenticated visitor could submit arbitrary data on behalf of the site. The handler now verifies a nonce, requires the manage_pys capability, and sanitises each field.

This vulnerability affects the following application versions:

  • PixelYourSite – Your smart PIXEL 11.0.0
  • PixelYourSite – Your smart PIXEL 11.0.0.1
  • PixelYourSite – Your smart PIXEL 11.0.0.2
  • PixelYourSite – Your smart PIXEL 11.0.0.3
  • PixelYourSite – Your smart PIXEL 11.0.0.4
  • PixelYourSite – Your smart PIXEL 11.0.1
  • PixelYourSite – Your smart PIXEL 11.0.1.1
  • PixelYourSite – Your smart PIXEL 11.0.1.2
  • PixelYourSite – Your smart PIXEL 11.0.2
  • PixelYourSite – Your smart PIXEL 11.1.0
  • PixelYourSite – Your smart PIXEL 11.1.1
  • PixelYourSite – Your smart PIXEL 11.1.2
  • PixelYourSite – Your smart PIXEL 11.1.3
  • PixelYourSite – Your smart PIXEL 11.1.4
  • PixelYourSite – Your smart PIXEL 11.1.4.1
  • PixelYourSite – Your smart PIXEL 11.1.4.2
  • PixelYourSite – Your smart PIXEL 11.1.5
  • PixelYourSite – Your smart PIXEL 11.1.5.1
  • PixelYourSite – Your smart PIXEL 11.1.5.2
  • PixelYourSite – Your smart PIXEL 11.2.0
  • PixelYourSite – Your smart PIXEL 11.2.0.1
  • PixelYourSite – Your smart PIXEL 11.2.0.2
  • PixelYourSite – Your smart PIXEL 11.2.0.3
  • PixelYourSite – Your smart PIXEL 11.2.0.4
  • PixelYourSite – Your smart PIXEL 11.2.0.5
  • PixelYourSite – Your smart PIXEL 11.2.0.6
  • PixelYourSite – Your smart PIXEL 11.2.0.7
  • PixelYourSite – Your smart PIXEL 11.2.1

SQL Injection in HappyAddons for Elementor Happy Clone

Skrevet den af i HappyAddons for Elementor

The Happy Clone feature of HappyAddons for Elementor copied a post’s custom fields into the clone with a hand-built SQL query that did not escape the custom field name. A user with Contributor access or higher could add a crafted custom field to their own post and clone it to run arbitrary SQL, for example to read password hashes from the database. Affects versions 2.4.0 through 3.20.4; fixed in 3.20.6 and finalised in 3.20.7.

This vulnerability affects the following application versions:

  • HappyAddons for Elementor 2.4.0
  • HappyAddons for Elementor 2.4.1
  • HappyAddons for Elementor 2.4.2
  • HappyAddons for Elementor 2.5.0
  • HappyAddons for Elementor 2.6.0
  • HappyAddons for Elementor 2.6.1
  • HappyAddons for Elementor 2.7.0
  • HappyAddons for Elementor 2.7.1
  • HappyAddons for Elementor 2.7.2
  • HappyAddons for Elementor 2.7.3
  • HappyAddons for Elementor 2.8.0
  • HappyAddons for Elementor 2.8.1
  • HappyAddons for Elementor 2.9.0
  • HappyAddons for Elementor 2.10.0
  • HappyAddons for Elementor 2.11.0
  • HappyAddons for Elementor 2.11.1
  • HappyAddons for Elementor 2.12.0
  • HappyAddons for Elementor 2.12.1
  • HappyAddons for Elementor 2.12.2
  • HappyAddons for Elementor 2.12.3
  • HappyAddons for Elementor 2.13.0
  • HappyAddons for Elementor 2.13.1
  • HappyAddons for Elementor 2.13.2
  • HappyAddons for Elementor 2.13.3
  • HappyAddons for Elementor 2.14.0
  • HappyAddons for Elementor 2.14.1
  • HappyAddons for Elementor 2.14.2
  • HappyAddons for Elementor 2.14.3
  • HappyAddons for Elementor 2.15.0
  • HappyAddons for Elementor 2.16.0
  • HappyAddons for Elementor 2.16.1
  • HappyAddons for Elementor 2.17.0
  • HappyAddons for Elementor 2.17.1
  • HappyAddons for Elementor 2.18.0
  • HappyAddons for Elementor 2.19.0
  • HappyAddons for Elementor 2.20.0
  • HappyAddons for Elementor 2.21.0
  • HappyAddons for Elementor 2.21.1
  • HappyAddons for Elementor 2.22.0
  • HappyAddons for Elementor 2.22.1
  • HappyAddons for Elementor 2.23.0
  • HappyAddons for Elementor 2.24.0
  • HappyAddons for Elementor 2.24.1
  • HappyAddons for Elementor 2.25.0
  • HappyAddons for Elementor 2.26.0
  • HappyAddons for Elementor 2.27.0
  • HappyAddons for Elementor 3.0.0
  • HappyAddons for Elementor 3.0.1
  • HappyAddons for Elementor 3.1.0
  • HappyAddons for Elementor 3.2.1
  • HappyAddons for Elementor 3.2.2
  • HappyAddons for Elementor 3.3.0
  • HappyAddons for Elementor 3.3.1
  • HappyAddons for Elementor 3.3.2
  • HappyAddons for Elementor 3.3.3
  • HappyAddons for Elementor 3.4.0
  • HappyAddons for Elementor 3.4.1
  • HappyAddons for Elementor 3.4.2
  • HappyAddons for Elementor 3.4.3
  • HappyAddons for Elementor 3.4.4
  • HappyAddons for Elementor 3.5.0
  • HappyAddons for Elementor 3.5.1
  • HappyAddons for Elementor 3.5.2
  • HappyAddons for Elementor 3.6.0
  • HappyAddons for Elementor 3.6.1
  • HappyAddons for Elementor 3.6.2
  • HappyAddons for Elementor 3.6.3
  • HappyAddons for Elementor 3.7.0
  • HappyAddons for Elementor 3.7.1
  • HappyAddons for Elementor 3.7.2
  • HappyAddons for Elementor 3.8.0
  • HappyAddons for Elementor 3.8.1
  • HappyAddons for Elementor 3.8.2
  • HappyAddons for Elementor 3.8.3
  • HappyAddons for Elementor 3.8.4
  • HappyAddons for Elementor 3.8.5
  • HappyAddons for Elementor 3.8.6
  • HappyAddons for Elementor 3.8.7
  • HappyAddons for Elementor 3.8.8
  • HappyAddons for Elementor 3.8.9
  • HappyAddons for Elementor 3.9.0
  • HappyAddons for Elementor 3.9.1
  • HappyAddons for Elementor 3.9.1.1
  • HappyAddons for Elementor 3.10.0
  • HappyAddons for Elementor 3.10.1
  • HappyAddons for Elementor 3.10.2
  • HappyAddons for Elementor 3.10.3
  • HappyAddons for Elementor 3.10.4
  • HappyAddons for Elementor 3.10.5
  • HappyAddons for Elementor 3.10.6
  • HappyAddons for Elementor 3.10.7
  • HappyAddons for Elementor 3.10.8
  • HappyAddons for Elementor 3.10.9
  • HappyAddons for Elementor 3.11.0
  • HappyAddons for Elementor 3.11.1
  • HappyAddons for Elementor 3.11.2
  • HappyAddons for Elementor 3.11.3
  • HappyAddons for Elementor 3.12.0
  • HappyAddons for Elementor 3.12.1
  • HappyAddons for Elementor 3.12.2
  • HappyAddons for Elementor 3.12.3
  • HappyAddons for Elementor 3.12.4
  • HappyAddons for Elementor 3.12.5
  • HappyAddons for Elementor 3.12.6
  • HappyAddons for Elementor 3.13.0
  • HappyAddons for Elementor 3.14.0
  • HappyAddons for Elementor 3.14.1
  • HappyAddons for Elementor 3.15.0
  • HappyAddons for Elementor 3.15.1
  • HappyAddons for Elementor 3.15.2
  • HappyAddons for Elementor 3.16.0
  • HappyAddons for Elementor 3.16.1
  • HappyAddons for Elementor 3.16.2
  • HappyAddons for Elementor 3.16.3
  • HappyAddons for Elementor 3.16.4
  • HappyAddons for Elementor 3.16.5
  • HappyAddons for Elementor 3.17.0
  • HappyAddons for Elementor 3.18.0
  • HappyAddons for Elementor 3.18.1
  • HappyAddons for Elementor 3.19.0
  • HappyAddons for Elementor 3.20.0
  • HappyAddons for Elementor 3.20.1
  • HappyAddons for Elementor 3.20.2
  • HappyAddons for Elementor 3.20.3
  • HappyAddons for Elementor 3.20.4

Arbitrary Plugin Installation via Onboarding Key Exposure in ExactMetrics

Skrevet den af i ExactMetrics

ExactMetrics handed its one-time onboarding key to any user allowed to view reports, and that key was the only check guarding the route that issues the token accepted by the unauthenticated exactmetrics_connect_process upgrade handler. An Editor granted report access could therefore install and activate an arbitrary plugin from a URL of their choosing, leading to remote code execution. Affects 8.6.0 through 9.1.2 and 10.1.0 through 10.1.2.

This vulnerability affects the following application versions:

  • ExactMetrics 8.6.0
  • ExactMetrics 8.6.1
  • ExactMetrics 8.6.2
  • ExactMetrics 8.7.0
  • ExactMetrics 8.7.1
  • ExactMetrics 8.7.2
  • ExactMetrics 8.7.3
  • ExactMetrics 8.7.4
  • ExactMetrics 8.8.0
  • ExactMetrics 8.9.0
  • ExactMetrics 8.10.0
  • ExactMetrics 8.10.1
  • ExactMetrics 8.10.2
  • ExactMetrics 8.11.0
  • ExactMetrics 8.11.1
  • ExactMetrics 9.0.0
  • ExactMetrics 9.0.1
  • ExactMetrics 9.0.2
  • ExactMetrics 9.0.3
  • ExactMetrics 9.1.0
  • ExactMetrics 9.1.1
  • ExactMetrics 9.1.2
  • ExactMetrics 9.1.3
  • ExactMetrics 10.1.0
  • ExactMetrics 10.1.1
  • ExactMetrics 10.1.2

Purchase Verification Bypass in Otter Blocks Stripe Checkout

Skrevet den af i Otter Blocks

Otter Blocks kept a visitor’s Stripe purchase history in an unsigned ‘o_stripe_data’ browser cookie and trusted it when evaluating the ‘Stripe purchase’ block-visibility condition. An unauthenticated visitor could forge that cookie with a product ID read straight out of the public checkout-block markup and unlock paid, purchase-gated content without paying. Otter Blocks 3.1.5 signs the cookie with an HMAC-SHA256 keyed on the site’s wp_salt() and verifies it with hash_equals() before the data is used.

This vulnerability affects the following application versions:

  • Otter Blocks 2.2.0
  • Otter Blocks 2.2.1
  • Otter Blocks 2.2.2
  • Otter Blocks 2.2.3
  • Otter Blocks 2.2.4
  • Otter Blocks 2.2.5
  • Otter Blocks 2.2.6
  • Otter Blocks 2.2.7
  • Otter Blocks 2.3.0
  • Otter Blocks 2.3.1
  • Otter Blocks 2.3.2
  • Otter Blocks 2.3.3
  • Otter Blocks 2.3.4
  • Otter Blocks 2.4.0
  • Otter Blocks 2.4.1
  • Otter Blocks 2.5.0
  • Otter Blocks 2.5.1
  • Otter Blocks 2.5.2
  • Otter Blocks 2.6.0
  • Otter Blocks 2.6.1
  • Otter Blocks 2.6.2
  • Otter Blocks 2.6.3
  • Otter Blocks 2.6.4
  • Otter Blocks 2.6.5
  • Otter Blocks 2.6.6
  • Otter Blocks 2.6.7
  • Otter Blocks 2.6.8
  • Otter Blocks 2.6.9
  • Otter Blocks 2.6.10
  • Otter Blocks 2.6.11
  • Otter Blocks 2.6.12
  • Otter Blocks 2.6.13
  • Otter Blocks 3.0.0
  • Otter Blocks 3.0.1
  • Otter Blocks 3.0.2
  • Otter Blocks 3.0.3
  • Otter Blocks 3.0.4
  • Otter Blocks 3.0.5
  • Otter Blocks 3.0.6
  • Otter Blocks 3.0.7
  • Otter Blocks 3.0.8
  • Otter Blocks 3.0.9
  • Otter Blocks 3.0.10
  • Otter Blocks 3.0.11
  • Otter Blocks 3.0.12
  • Otter Blocks 3.1.0
  • Otter Blocks 3.1.1
  • Otter Blocks 3.1.2
  • Otter Blocks 3.1.3
  • Otter Blocks 3.1.4

Unauthenticated Nonce Disclosure for Unpublished Forms in Forminator Forms

Skrevet den af i Forminator Forms

Forminator Forms’ public forminator_get_nonce AJAX action handed any unauthenticated visitor a valid submission nonce for any form ID, including draft and other unpublished forms and forms configured to load via AJAX. Because the submission handler does not check the form’s publish status itself, an attacker could use the nonce to submit entries to forms the site owner never published. Affects versions 1.36.0 to 1.58.2; fixed in 1.58.3.

This vulnerability affects the following application versions:

  • Forminator Forms 1.36.0
  • Forminator Forms 1.36.1
  • Forminator Forms 1.36.2
  • Forminator Forms 1.36.3
  • Forminator Forms 1.37.1
  • Forminator Forms 1.38.1
  • Forminator Forms 1.38.2
  • Forminator Forms 1.38.3
  • Forminator Forms 1.39.0
  • Forminator Forms 1.39.1
  • Forminator Forms 1.39.2
  • Forminator Forms 1.39.3
  • Forminator Forms 1.40.0
  • Forminator Forms 1.41.1
  • Forminator Forms 1.41.2
  • Forminator Forms 1.42.0
  • Forminator Forms 1.42.1
  • Forminator Forms 1.42.2
  • Forminator Forms 1.43.0
  • Forminator Forms 1.43.1
  • Forminator Forms 1.44
  • Forminator Forms 1.44.1
  • Forminator Forms 1.44.2
  • Forminator Forms 1.44.3
  • Forminator Forms 1.45
  • Forminator Forms 1.45.1
  • Forminator Forms 1.46.1
  • Forminator Forms 1.46.2
  • Forminator Forms 1.47
  • Forminator Forms 1.48.2
  • Forminator Forms 1.48.3
  • Forminator Forms 1.49.0
  • Forminator Forms 1.49.2
  • Forminator Forms 1.50.1
  • Forminator Forms 1.50.3
  • Forminator Forms 1.51
  • Forminator Forms 1.51.1
  • Forminator Forms 1.52
  • Forminator Forms 1.52.1
  • Forminator Forms 1.52.2
  • Forminator Forms 1.53.0
  • Forminator Forms 1.53.0.1
  • Forminator Forms 1.53.1
  • Forminator Forms 1.53.2
  • Forminator Forms 1.54
  • Forminator Forms 1.54.0
  • Forminator Forms 1.55.0
  • Forminator Forms 1.55.0.1
  • Forminator Forms 1.55.0.2
  • Forminator Forms 1.55.1
  • Forminator Forms 1.56.0
  • Forminator Forms 1.56.0.1
  • Forminator Forms 1.56.0.2
  • Forminator Forms 1.56.1
  • Forminator Forms 1.56.2
  • Forminator Forms 1.57.0
  • Forminator Forms 1.57.0.1
  • Forminator Forms 1.57.0.2
  • Forminator Forms 1.57.0.3
  • Forminator Forms 1.57.0.4
  • Forminator Forms 1.57.0.5
  • Forminator Forms 1.57.0.6
  • Forminator Forms 1.57.0.7
  • Forminator Forms 1.57.0.8
  • Forminator Forms 1.57.1
  • Forminator Forms 1.57.1.1
  • Forminator Forms 1.57.2
  • Forminator Forms 1.57.2.1
  • Forminator Forms 1.57.3
  • Forminator Forms 1.57.3.1
  • Forminator Forms 1.58.0
  • Forminator Forms 1.58.1
  • Forminator Forms 1.58.2

PHP Object Injection via Unsafe Deserialization of POST Parameters in Formidable Forms

Skrevet den af i Formidable Forms

Formidable Forms passed every POST value read through FrmAppHelper::get_post_param() to maybe_unserialize(), so an unauthenticated visitor could submit a serialized PHP object in a parameter such as form_id and have it instantiated on any front-end request. With a suitable gadget class present this can lead to code execution or data tampering. Affects versions before 4.02.01 (exploitable from 4.x, where the value is unslashed before deserialization); fixed in 4.02.01.

This vulnerability affects the following application versions:

  • Formidable Forms 4.01.02

Missing Authorization in The Events Calendar Ignored Events Restore

Skrevet den af i The Events Calendar

The Events Calendar’s Ignored Events restore action did not check that the target event was actually ignored before changing its status. As a result, an authenticated user with Contributor-level access could “restore” their own draft or pending event and get it published without review. Affects versions up to and including 6.18.2; fixed in 6.18.3.

This vulnerability affects the following application versions:

  • The Events Calendar 4.7
  • The Events Calendar 4.7.0.2
  • The Events Calendar 4.7.1.1
  • The Events Calendar 4.7.2.1
  • The Events Calendar 4.7.3.1
  • The Events Calendar 4.7.4.1
  • The Events Calendar 4.8
  • The Events Calendar 4.8.0.2
  • The Events Calendar 4.8.1.1
  • The Events Calendar 4.8.2.1
  • The Events Calendar 4.9.0.1
  • The Events Calendar 4.9.0.2
  • The Events Calendar 4.9.0.4
  • The Events Calendar 4.9.1
  • The Events Calendar 4.9.1.2
  • The Events Calendar 4.9.2.1
  • The Events Calendar 4.9.3
  • The Events Calendar 4.9.3.3
  • The Events Calendar 4.9.4.1
  • The Events Calendar 4.9.6.1
  • The Events Calendar 4.9.7.1
  • The Events Calendar 4.9.8.1
  • The Events Calendar 4.9.9.1
  • The Events Calendar 4.9.10.1
  • The Events Calendar 4.9.11.1
  • The Events Calendar 4.9.12.1
  • The Events Calendar 4.9.13.1
  • The Events Calendar 4.9.14.1
  • The Events Calendar 5.0.0
  • The Events Calendar 5.0.0.1
  • The Events Calendar 5.0.0.3
  • The Events Calendar 5.0.1.1
  • The Events Calendar 5.0.1.2
  • The Events Calendar 5.0.2
  • The Events Calendar 5.0.2.2
  • The Events Calendar 5.0.3.3
  • The Events Calendar 5.1.0.1
  • The Events Calendar 5.1.0.2
  • The Events Calendar 5.1.1.1
  • The Events Calendar 5.1.1.2
  • The Events Calendar 5.1.2.1
  • The Events Calendar 5.1.3
  • The Events Calendar 5.1.3.1
  • The Events Calendar 5.1.4
  • The Events Calendar 5.1.4.1
  • The Events Calendar 5.1.5
  • The Events Calendar 5.1.5.1
  • The Events Calendar 5.1.6
  • The Events Calendar 5.1.6.1
  • The Events Calendar 5.2.0
  • The Events Calendar 5.2.0.1
  • The Events Calendar 5.2.1
  • The Events Calendar 5.2.1.1
  • The Events Calendar 5.2.1.2
  • The Events Calendar 5.3.0
  • The Events Calendar 5.3.0.1
  • The Events Calendar 5.3.1
  • The Events Calendar 5.3.1.1
  • The Events Calendar 5.3.1.2
  • The Events Calendar 5.3.2
  • The Events Calendar 5.3.2.1
  • The Events Calendar 5.3.2.2
  • The Events Calendar 5.4.0
  • The Events Calendar 5.4.0.1
  • The Events Calendar 5.4.0.2
  • The Events Calendar 5.4.0.3
  • The Events Calendar 5.5.0
  • The Events Calendar 5.5.0.1
  • The Events Calendar 5.5.0.2
  • The Events Calendar 5.6.0
  • The Events Calendar 5.7.0
  • The Events Calendar 5.7.1
  • The Events Calendar 5.8.0
  • The Events Calendar 5.8.2
  • The Events Calendar 5.9.0
  • The Events Calendar 5.9.1
  • The Events Calendar 5.9.2
  • The Events Calendar 5.10.0
  • The Events Calendar 5.10.1
  • The Events Calendar 5.11.0
  • The Events Calendar 5.12.0
  • The Events Calendar 5.12.2
  • The Events Calendar 5.12.3
  • The Events Calendar 5.12.4
  • The Events Calendar 5.13.0
  • The Events Calendar 5.14.0
  • The Events Calendar 5.14.0.1
  • The Events Calendar 5.14.0.2
  • The Events Calendar 5.14.0.3
  • The Events Calendar 5.14.0.4
  • The Events Calendar 5.14.1
  • The Events Calendar 5.14.2
  • The Events Calendar 5.14.2.1
  • The Events Calendar 5.15.0
  • The Events Calendar 5.15.0.1
  • The Events Calendar 5.16.0
  • The Events Calendar 5.16.1
  • The Events Calendar 5.16.1.1
  • The Events Calendar 5.16.2
  • The Events Calendar 5.16.2.1
  • The Events Calendar 5.16.3
  • The Events Calendar 5.16.3.1
  • The Events Calendar 5.16.4
  • The Events Calendar 5.16.4.1
  • The Events Calendar 6.0.0
  • The Events Calendar 6.0.0.1
  • The Events Calendar 6.0.1
  • The Events Calendar 6.0.1.1
  • The Events Calendar 6.0.2
  • The Events Calendar 6.0.3
  • The Events Calendar 6.0.3.1
  • The Events Calendar 6.0.4
  • The Events Calendar 6.0.5
  • The Events Calendar 6.0.6
  • The Events Calendar 6.0.6.1
  • The Events Calendar 6.0.6.2
  • The Events Calendar 6.0.7
  • The Events Calendar 6.0.7.1
  • The Events Calendar 6.0.8
  • The Events Calendar 6.0.9
  • The Events Calendar 6.0.10
  • The Events Calendar 6.0.11
  • The Events Calendar 6.0.12
  • The Events Calendar 6.0.13
  • The Events Calendar 6.0.13.1
  • The Events Calendar 6.1.0
  • The Events Calendar 6.1.0.1
  • The Events Calendar 6.1.0.2
  • The Events Calendar 6.1.1
  • The Events Calendar 6.1.2
  • The Events Calendar 6.1.2.1
  • The Events Calendar 6.1.2.2
  • The Events Calendar 6.1.3
  • The Events Calendar 6.1.4
  • The Events Calendar 6.2.0
  • The Events Calendar 6.2.0.1
  • The Events Calendar 6.2.1
  • The Events Calendar 6.2.2
  • The Events Calendar 6.2.2.1
  • The Events Calendar 6.2.3
  • The Events Calendar 6.2.3.1
  • The Events Calendar 6.2.3.2
  • The Events Calendar 6.2.4
  • The Events Calendar 6.2.5
  • The Events Calendar 6.2.6
  • The Events Calendar 6.2.6.1
  • The Events Calendar 6.2.7
  • The Events Calendar 6.2.8
  • The Events Calendar 6.2.8.1
  • The Events Calendar 6.2.8.2
  • The Events Calendar 6.3.0
  • The Events Calendar 6.3.1
  • The Events Calendar 6.3.3
  • The Events Calendar 6.3.3.1
  • The Events Calendar 6.3.4
  • The Events Calendar 6.3.5
  • The Events Calendar 6.3.6
  • The Events Calendar 6.3.7
  • The Events Calendar 6.4.0
  • The Events Calendar 6.4.0.1
  • The Events Calendar 6.5.0
  • The Events Calendar 6.5.0.1
  • The Events Calendar 6.5.1
  • The Events Calendar 6.5.1.1
  • The Events Calendar 6.5.1.2
  • The Events Calendar 6.5.1.3
  • The Events Calendar 6.5.1.4
  • The Events Calendar 6.5.1.5
  • The Events Calendar 6.5.1.6
  • The Events Calendar 6.5.2
  • The Events Calendar 6.6.0
  • The Events Calendar 6.6.0.1
  • The Events Calendar 6.6.0.2
  • The Events Calendar 6.6.1
  • The Events Calendar 6.6.2
  • The Events Calendar 6.6.3
  • The Events Calendar 6.6.4
  • The Events Calendar 6.6.4.1
  • The Events Calendar 6.6.4.2
  • The Events Calendar 6.7.0
  • The Events Calendar 6.7.1
  • The Events Calendar 6.8.0
  • The Events Calendar 6.8.1
  • The Events Calendar 6.8.2
  • The Events Calendar 6.8.2.1
  • The Events Calendar 6.9.0
  • The Events Calendar 6.9.1
  • The Events Calendar 6.10.0
  • The Events Calendar 6.10.1
  • The Events Calendar 6.10.3
  • The Events Calendar 6.11.0.1
  • The Events Calendar 6.11.1
  • The Events Calendar 6.11.2
  • The Events Calendar 6.11.2.1
  • The Events Calendar 6.13.0
  • The Events Calendar 6.13.1
  • The Events Calendar 6.13.2.1
  • The Events Calendar 6.14.0
  • The Events Calendar 6.14.1
  • The Events Calendar 6.14.2
  • The Events Calendar 6.15.0
  • The Events Calendar 6.15.0.1
  • The Events Calendar 6.15.1
  • The Events Calendar 6.15.1.1
  • The Events Calendar 6.15.2
  • The Events Calendar 6.15.3
  • The Events Calendar 6.15.4
  • The Events Calendar 6.15.5
  • The Events Calendar 6.15.6
  • The Events Calendar 6.15.8
  • The Events Calendar 6.15.9
  • The Events Calendar 6.15.10
  • The Events Calendar 6.15.12
  • The Events Calendar 6.15.12.1
  • The Events Calendar 6.15.12.2
  • The Events Calendar 6.15.13
  • The Events Calendar 6.15.13.1
  • The Events Calendar 6.15.14
  • The Events Calendar 6.15.15
  • The Events Calendar 6.15.16
  • The Events Calendar 6.15.17.1
  • The Events Calendar 6.15.18
  • The Events Calendar 6.15.19
  • The Events Calendar 6.15.20
  • The Events Calendar 6.16.0
  • The Events Calendar 6.16.1
  • The Events Calendar 6.16.2
  • The Events Calendar 6.16.3
  • The Events Calendar 6.16.4
  • The Events Calendar 6.16.4.1
  • The Events Calendar 6.16.5
  • The Events Calendar 6.16.5.1
  • The Events Calendar 6.17.0
  • The Events Calendar 6.17.1
  • The Events Calendar 6.17.2
  • The Events Calendar 6.17.3
  • The Events Calendar 6.17.3.1
  • The Events Calendar 6.17.4
  • The Events Calendar 6.17.4.1
  • The Events Calendar 6.17.5
  • The Events Calendar 6.17.5.1
  • The Events Calendar 6.18.0
  • The Events Calendar 6.18.1
  • The Events Calendar 6.18.2

SQL Injection in WP Statistics Page and Search Engine Statistics

Skrevet den af i WP Statistics

WP Statistics before 12.0.8 concatenates the page/post ID and the search engine name into SQL queries without sanitising them. A user who can supply these values, for example through the [wpstatistics] shortcode attributes id and provider (any logged-in user can render shortcodes via the parse-media-shortcode AJAX action), can inject SQL and read data from the WordPress database. Fixed in 12.0.8.

This vulnerability affects the following application versions:

  • WP Statistics 6.0
  • WP Statistics 6.1
  • WP Statistics 7.0
  • WP Statistics 7.0.1
  • WP Statistics 7.0.2
  • WP Statistics 7.0.3
  • WP Statistics 7.0.4
  • WP Statistics 7.1
  • WP Statistics 7.2
  • WP Statistics 7.3
  • WP Statistics 7.4
  • WP Statistics 8.0
  • WP Statistics 8.1
  • WP Statistics 8.1.1
  • WP Statistics 8.2
  • WP Statistics 8.3
  • WP Statistics 8.3.1
  • WP Statistics 8.4
  • WP Statistics 8.5
  • WP Statistics 8.5.1
  • WP Statistics 8.6
  • WP Statistics 8.6.1
  • WP Statistics 8.6.2
  • WP Statistics 8.6.3
  • WP Statistics 8.7
  • WP Statistics 8.7.1
  • WP Statistics 8.7.2
  • WP Statistics 8.8
  • WP Statistics 8.8.1
  • WP Statistics 9.0
  • WP Statistics 9.1
  • WP Statistics 9.1.1
  • WP Statistics 9.1.2
  • WP Statistics 9.1.3
  • WP Statistics 9.2
  • WP Statistics 9.3
  • WP Statistics 9.3.1
  • WP Statistics 9.4
  • WP Statistics 9.4.1
  • WP Statistics 9.5
  • WP Statistics 9.5.1
  • WP Statistics 9.5.2
  • WP Statistics 9.5.3
  • WP Statistics 9.6
  • WP Statistics 9.6.1
  • WP Statistics 9.6.2
  • WP Statistics 9.6.3
  • WP Statistics 9.6.4
  • WP Statistics 9.6.5
  • WP Statistics 9.6.6
  • WP Statistics 9.7
  • WP Statistics 10.0
  • WP Statistics 10.0.1
  • WP Statistics 10.0.2
  • WP Statistics 10.0.3
  • WP Statistics 10.0.4
  • WP Statistics 10.0.5
  • WP Statistics 10.1
  • WP Statistics 10.2
  • WP Statistics 10.3
  • WP Statistics 11.0
  • WP Statistics 11.0.1
  • WP Statistics 11.0.2
  • WP Statistics 11.0.3
  • WP Statistics 12.0
  • WP Statistics 12.0.1
  • WP Statistics 12.0.2
  • WP Statistics 12.0.3
  • WP Statistics 12.0.4
  • WP Statistics 12.0.5
  • WP Statistics 12.0.6
  • WP Statistics 12.0.7

Server-Side Request Forgery in Visualizer Gutenberg REST Endpoints

Skrevet den af i Visualizer – Tables & Charts Manager

Visualizer registered its Gutenberg REST routes (/wp-json/visualizer/v1/upload-data, /update-chart, /get-permission-data and the chart_data REST field) without any permission check, so any unauthenticated visitor could reach them. By POSTing a crafted URL to the upload-data route an attacker made the site fetch an arbitrary address, allowing blind server-side request forgery against hosts reachable only from the server, and could also read or overwrite chart data. Fixed in 3.3.1 by requiring the ‘edit_posts’ capability in each REST callback.

This vulnerability affects the following application versions:

  • Visualizer – Tables & Charts Manager 3.1.0
  • Visualizer – Tables & Charts Manager 3.1.1
  • Visualizer – Tables & Charts Manager 3.1.2
  • Visualizer – Tables & Charts Manager 3.1.3
  • Visualizer – Tables & Charts Manager 3.2.0
  • Visualizer – Tables & Charts Manager 3.2.1
  • Visualizer – Tables & Charts Manager 3.3.0

SQL Injection in Form Maker by 10Web Submissions Sorting

Skrevet den af i Form Maker by 10Web

Form Maker by 10Web concatenated the asc_or_desc request parameter unescaped into the ORDER BY clause of the admin Submissions listing, allowing SQL injection (for example time-based extraction of database contents). Exploitation needs an administrator session, but the listing is reachable by a plain GET link without a nonce, so an administrator can be made to trigger it via a crafted link. Affects 1.12.33 through 1.13.3; fixed in 1.13.4.

This vulnerability affects the following application versions:

  • Form Maker by 10Web 1.12.33
  • Form Maker by 10Web 1.12.34
  • Form Maker by 10Web 1.12.35
  • Form Maker by 10Web 1.12.36
  • Form Maker by 10Web 1.12.37
  • Form Maker by 10Web 1.12.38
  • Form Maker by 10Web 1.12.39
  • Form Maker by 10Web 1.12.40
  • Form Maker by 10Web 1.12.41
  • Form Maker by 10Web 1.12.42
  • Form Maker by 10Web 1.13.0
  • Form Maker by 10Web 1.13.1
  • Form Maker by 10Web 1.13.2
  • Form Maker by 10Web 1.13.3

Stored Cross-Site Scripting in Spectra Testimonial Block Carousel Arrows

Skrevet den af i Spectra – WordPress Gutenberg Blocks

An author or contributor can store script in Spectra Testimonial block arrow settings, which are concatenated unescaped into the carousel arrow markup and injected into the page by the slider. Affects Spectra before 2.12.9.

This vulnerability affects the following application versions:

  • Spectra – WordPress Gutenberg Blocks 1.5.1
  • Spectra – WordPress Gutenberg Blocks 1.6.0
  • Spectra – WordPress Gutenberg Blocks 1.6.1
  • Spectra – WordPress Gutenberg Blocks 1.6.2
  • Spectra – WordPress Gutenberg Blocks 1.7.0
  • Spectra – WordPress Gutenberg Blocks 1.8.0
  • Spectra – WordPress Gutenberg Blocks 1.8.1
  • Spectra – WordPress Gutenberg Blocks 1.8.2
  • Spectra – WordPress Gutenberg Blocks 1.9.0
  • Spectra – WordPress Gutenberg Blocks 1.9.1
  • Spectra – WordPress Gutenberg Blocks 1.10.0
  • Spectra – WordPress Gutenberg Blocks 1.11.0
  • Spectra – WordPress Gutenberg Blocks 1.11.1
  • Spectra – WordPress Gutenberg Blocks 1.12.0
  • Spectra – WordPress Gutenberg Blocks 1.12.1
  • Spectra – WordPress Gutenberg Blocks 1.12.2
  • Spectra – WordPress Gutenberg Blocks 1.12.3
  • Spectra – WordPress Gutenberg Blocks 1.12.4
  • Spectra – WordPress Gutenberg Blocks 1.12.5
  • Spectra – WordPress Gutenberg Blocks 1.13.0
  • Spectra – WordPress Gutenberg Blocks 1.13.1
  • Spectra – WordPress Gutenberg Blocks 1.13.2
  • Spectra – WordPress Gutenberg Blocks 1.13.3
  • Spectra – WordPress Gutenberg Blocks 1.13.4
  • Spectra – WordPress Gutenberg Blocks 1.13.5
  • Spectra – WordPress Gutenberg Blocks 1.13.6
  • Spectra – WordPress Gutenberg Blocks 1.14.0
  • Spectra – WordPress Gutenberg Blocks 1.14.1
  • Spectra – WordPress Gutenberg Blocks 1.14.2
  • Spectra – WordPress Gutenberg Blocks 1.14.3
  • Spectra – WordPress Gutenberg Blocks 1.14.4
  • Spectra – WordPress Gutenberg Blocks 1.14.5
  • Spectra – WordPress Gutenberg Blocks 1.14.6
  • Spectra – WordPress Gutenberg Blocks 1.14.7
  • Spectra – WordPress Gutenberg Blocks 1.14.8
  • Spectra – WordPress Gutenberg Blocks 1.14.9
  • Spectra – WordPress Gutenberg Blocks 1.14.10
  • Spectra – WordPress Gutenberg Blocks 1.14.11
  • Spectra – WordPress Gutenberg Blocks 1.15.0
  • Spectra – WordPress Gutenberg Blocks 1.15.1
  • Spectra – WordPress Gutenberg Blocks 1.15.2
  • Spectra – WordPress Gutenberg Blocks 1.16.0
  • Spectra – WordPress Gutenberg Blocks 1.16.1
  • Spectra – WordPress Gutenberg Blocks 1.17.0
  • Spectra – WordPress Gutenberg Blocks 1.18.0
  • Spectra – WordPress Gutenberg Blocks 1.18.1
  • Spectra – WordPress Gutenberg Blocks 1.18.2
  • Spectra – WordPress Gutenberg Blocks 1.19.0
  • Spectra – WordPress Gutenberg Blocks 1.20.0
  • Spectra – WordPress Gutenberg Blocks 1.20.1
  • Spectra – WordPress Gutenberg Blocks 1.21.0
  • Spectra – WordPress Gutenberg Blocks 1.21.1
  • Spectra – WordPress Gutenberg Blocks 1.22.0
  • Spectra – WordPress Gutenberg Blocks 1.22.1
  • Spectra – WordPress Gutenberg Blocks 1.22.2
  • Spectra – WordPress Gutenberg Blocks 1.22.3
  • Spectra – WordPress Gutenberg Blocks 1.22.4
  • Spectra – WordPress Gutenberg Blocks 1.22.5
  • Spectra – WordPress Gutenberg Blocks 1.23.0
  • Spectra – WordPress Gutenberg Blocks 1.23.1
  • Spectra – WordPress Gutenberg Blocks 1.23.2
  • Spectra – WordPress Gutenberg Blocks 1.23.3
  • Spectra – WordPress Gutenberg Blocks 1.23.4
  • Spectra – WordPress Gutenberg Blocks 1.23.5
  • Spectra – WordPress Gutenberg Blocks 1.24.0
  • Spectra – WordPress Gutenberg Blocks 1.24.1
  • Spectra – WordPress Gutenberg Blocks 1.24.2
  • Spectra – WordPress Gutenberg Blocks 1.25.0
  • Spectra – WordPress Gutenberg Blocks 1.25.1
  • Spectra – WordPress Gutenberg Blocks 1.25.2
  • Spectra – WordPress Gutenberg Blocks 1.25.3
  • Spectra – WordPress Gutenberg Blocks 1.25.4
  • Spectra – WordPress Gutenberg Blocks 1.25.5
  • Spectra – WordPress Gutenberg Blocks 1.25.6
  • Spectra – WordPress Gutenberg Blocks 2.0.0
  • Spectra – WordPress Gutenberg Blocks 2.0.1
  • Spectra – WordPress Gutenberg Blocks 2.0.2
  • Spectra – WordPress Gutenberg Blocks 2.0.3
  • Spectra – WordPress Gutenberg Blocks 2.0.4
  • Spectra – WordPress Gutenberg Blocks 2.0.5
  • Spectra – WordPress Gutenberg Blocks 2.0.6
  • Spectra – WordPress Gutenberg Blocks 2.0.7
  • Spectra – WordPress Gutenberg Blocks 2.0.8
  • Spectra – WordPress Gutenberg Blocks 2.0.9
  • Spectra – WordPress Gutenberg Blocks 2.0.10
  • Spectra – WordPress Gutenberg Blocks 2.0.11
  • Spectra – WordPress Gutenberg Blocks 2.0.12
  • Spectra – WordPress Gutenberg Blocks 2.0.13
  • Spectra – WordPress Gutenberg Blocks 2.0.14
  • Spectra – WordPress Gutenberg Blocks 2.0.15
  • Spectra – WordPress Gutenberg Blocks 2.0.16
  • Spectra – WordPress Gutenberg Blocks 2.1.0
  • Spectra – WordPress Gutenberg Blocks 2.1.1
  • Spectra – WordPress Gutenberg Blocks 2.2.0
  • Spectra – WordPress Gutenberg Blocks 2.3.0
  • Spectra – WordPress Gutenberg Blocks 2.3.1
  • Spectra – WordPress Gutenberg Blocks 2.3.2
  • Spectra – WordPress Gutenberg Blocks 2.3.3
  • Spectra – WordPress Gutenberg Blocks 2.3.4
  • Spectra – WordPress Gutenberg Blocks 2.3.5
  • Spectra – WordPress Gutenberg Blocks 2.4.0
  • Spectra – WordPress Gutenberg Blocks 2.4.1
  • Spectra – WordPress Gutenberg Blocks 2.4.2
  • Spectra – WordPress Gutenberg Blocks 2.5.0
  • Spectra – WordPress Gutenberg Blocks 2.5.1
  • Spectra – WordPress Gutenberg Blocks 2.6.0
  • Spectra – WordPress Gutenberg Blocks 2.6.1
  • Spectra – WordPress Gutenberg Blocks 2.6.2
  • Spectra – WordPress Gutenberg Blocks 2.6.3
  • Spectra – WordPress Gutenberg Blocks 2.6.4
  • Spectra – WordPress Gutenberg Blocks 2.6.5
  • Spectra – WordPress Gutenberg Blocks 2.6.6
  • Spectra – WordPress Gutenberg Blocks 2.6.7
  • Spectra – WordPress Gutenberg Blocks 2.6.8
  • Spectra – WordPress Gutenberg Blocks 2.6.9
  • Spectra – WordPress Gutenberg Blocks 2.7.0
  • Spectra – WordPress Gutenberg Blocks 2.7.1
  • Spectra – WordPress Gutenberg Blocks 2.7.2
  • Spectra – WordPress Gutenberg Blocks 2.7.3
  • Spectra – WordPress Gutenberg Blocks 2.7.4
  • Spectra – WordPress Gutenberg Blocks 2.7.5
  • Spectra – WordPress Gutenberg Blocks 2.7.6
  • Spectra – WordPress Gutenberg Blocks 2.7.7
  • Spectra – WordPress Gutenberg Blocks 2.7.8
  • Spectra – WordPress Gutenberg Blocks 2.7.9
  • Spectra – WordPress Gutenberg Blocks 2.7.10
  • Spectra – WordPress Gutenberg Blocks 2.7.11
  • Spectra – WordPress Gutenberg Blocks 2.8.0
  • Spectra – WordPress Gutenberg Blocks 2.9.0
  • Spectra – WordPress Gutenberg Blocks 2.9.1
  • Spectra – WordPress Gutenberg Blocks 2.10.0
  • Spectra – WordPress Gutenberg Blocks 2.10.1
  • Spectra – WordPress Gutenberg Blocks 2.10.2
  • Spectra – WordPress Gutenberg Blocks 2.10.3
  • Spectra – WordPress Gutenberg Blocks 2.10.4
  • Spectra – WordPress Gutenberg Blocks 2.10.5
  • Spectra – WordPress Gutenberg Blocks 2.11.0
  • Spectra – WordPress Gutenberg Blocks 2.11.1
  • Spectra – WordPress Gutenberg Blocks 2.11.2
  • Spectra – WordPress Gutenberg Blocks 2.11.3
  • Spectra – WordPress Gutenberg Blocks 2.11.4
  • Spectra – WordPress Gutenberg Blocks 2.12.0
  • Spectra – WordPress Gutenberg Blocks 2.12.1
  • Spectra – WordPress Gutenberg Blocks 2.12.2
  • Spectra – WordPress Gutenberg Blocks 2.12.3
  • Spectra – WordPress Gutenberg Blocks 2.12.4
  • Spectra – WordPress Gutenberg Blocks 2.12.5
  • Spectra – WordPress Gutenberg Blocks 2.12.6
  • Spectra – WordPress Gutenberg Blocks 2.12.7
  • Spectra – WordPress Gutenberg Blocks 2.12.8

CSV Injection in Hustle Email List Export

Skrevet den af i Hustle

Hustle stores whatever a visitor types into an opt-in form and writes it unmodified into the email-list CSV export, so an unauthenticated visitor can plant a value that runs as a spreadsheet formula when an administrator opens the export in Excel or a similar program, which can leak data or run commands on the admin’s computer. The 6.0.8.1 fix escaped only a leading =, +, – or @ and could be bypassed with an embedded comma or line break; this patch also writes each row with proper CSV quoting, as Hustle 7.0 does. Affects Hustle 5.0.0 through 6.0.9.

This vulnerability affects the following application versions:

  • Hustle 5.0.0
  • Hustle 5.0.1
  • Hustle 5.0.1.1
  • Hustle 5.0.1.2
  • Hustle 5.1
  • Hustle 5.1.1
  • Hustle 5.1.2
  • Hustle 5.1.3
  • Hustle 5.1.3.1
  • Hustle 5.1.3.2
  • Hustle 5.1.4
  • Hustle 5.1.5
  • Hustle 6.0
  • Hustle 6.0.1
  • Hustle 6.0.2
  • Hustle 6.0.3
  • Hustle 6.0.4.2
  • Hustle 6.0.5
  • Hustle 6.0.6.1
  • Hustle 6.0.7
  • Hustle 6.0.8.1
  • Hustle 6.0.9

Missing Capability and Nonce Check in Rank Math SEO Analysis Reset

Skrevet den af i Rank Math SEO

The routine that clears stored SEO analysis results ran on any request carrying a clear_results parameter, with no capability check and no nonce. Any visitor could therefore delete a site’s stored analysis results, and the action could be triggered from another site. It now runs on admin_init and requires both the site_analysis capability and a valid nonce.

This vulnerability affects the following application versions:

  • Rank Math SEO 1.0.215
  • Rank Math SEO 1.0.215.1
  • Rank Math SEO 1.0.216
  • Rank Math SEO 1.0.217
  • Rank Math SEO 1.0.218
  • Rank Math SEO 1.0.219
  • Rank Math SEO 1.0.220
  • Rank Math SEO 1.0.221
  • Rank Math SEO 1.0.222
  • Rank Math SEO 1.0.223
  • Rank Math SEO 1.0.224
  • Rank Math SEO 1.0.225
  • Rank Math SEO 1.0.226
  • Rank Math SEO 1.0.227
  • Rank Math SEO 1.0.227.1
  • Rank Math SEO 1.0.228
  • Rank Math SEO 1.0.229
  • Rank Math SEO 1.0.230
  • Rank Math SEO 1.0.231
  • Rank Math SEO 1.0.232
  • Rank Math SEO 1.0.233
  • Rank Math SEO 1.0.234
  • Rank Math SEO 1.0.234.1
  • Rank Math SEO 1.0.235
  • Rank Math SEO 1.0.236
  • Rank Math SEO 1.0.237
  • Rank Math SEO 1.0.238
  • Rank Math SEO 1.0.239
  • Rank Math SEO 1.0.240
  • Rank Math SEO 1.0.241
  • Rank Math SEO 1.0.242
  • Rank Math SEO 1.0.243
  • Rank Math SEO 1.0.244
  • Rank Math SEO 1.0.245
  • Rank Math SEO 1.0.246
  • Rank Math SEO 1.0.247
  • Rank Math SEO 1.0.248
  • Rank Math SEO 1.0.249
  • Rank Math SEO 1.0.250
  • Rank Math SEO 1.0.251
  • Rank Math SEO 1.0.251.1
  • Rank Math SEO 1.0.252
  • Rank Math SEO 1.0.252.1
  • Rank Math SEO 1.0.253
  • Rank Math SEO 1.0.254
  • Rank Math SEO 1.0.255
  • Rank Math SEO 1.0.256
  • Rank Math SEO 1.0.257
  • Rank Math SEO 1.0.258
  • Rank Math SEO 1.0.259
  • Rank Math SEO 1.0.259.1
  • Rank Math SEO 1.0.260
  • Rank Math SEO 1.0.261
  • Rank Math SEO 1.0.262
  • Rank Math SEO 1.0.263
  • Rank Math SEO 1.0.264
  • Rank Math SEO 1.0.264.1
  • Rank Math SEO 1.0.265
  • Rank Math SEO 1.0.266
  • Rank Math SEO 1.0.266.1
  • Rank Math SEO 1.0.267
  • Rank Math SEO 1.0.268
  • Rank Math SEO 1.0.269
  • Rank Math SEO 1.0.270
  • Rank Math SEO 1.0.271
  • Rank Math SEO 1.0.271.1
  • Rank Math SEO 1.0.272
  • Rank Math SEO 1.0.273
  • Rank Math SEO 1.0.274
  • Rank Math SEO 1.0.274.1
  • Rank Math SEO 1.0.275
  • Rank Math SEO 1.0.276
  • Rank Math SEO 1.0.277
  • Rank Math SEO 1.0.277.1
  • Rank Math SEO 1.0.277.2
  • Rank Math SEO 1.0.278
  • Rank Math SEO 1.0.279

Arbitrary File Upload in WPvivid Backup & Migration Import Upload Handler

Skrevet den af i WPvivid — Backup, Migration & Staging

WPvivid Backup & Migration’s import upload handler (AJAX action wpvivid_upload_import_files) saved the uploaded file with WordPress’s file-type check turned off and validated only a separate ‘name’ field, so an administrator account could place a file with any extension, including a PHP script, in the plugin’s import directory under wp-content. Where that directory is not protected by Apache mod_rewrite (for example on nginx), the file can be executed as code. Fixed in 0.9.137, which accepts only properly named ZIP files, enforces WordPress’s type check, validates chunk numbers and refuses symlinked targets.

This vulnerability affects the following application versions:

  • WPvivid — Backup, Migration & Staging 0.9.28
  • WPvivid — Backup, Migration & Staging 0.9.29
  • WPvivid — Backup, Migration & Staging 0.9.30
  • WPvivid — Backup, Migration & Staging 0.9.31
  • WPvivid — Backup, Migration & Staging 0.9.32
  • WPvivid — Backup, Migration & Staging 0.9.33
  • WPvivid — Backup, Migration & Staging 0.9.34
  • WPvivid — Backup, Migration & Staging 0.9.35
  • WPvivid — Backup, Migration & Staging 0.9.36
  • WPvivid — Backup, Migration & Staging 0.9.37
  • WPvivid — Backup, Migration & Staging 0.9.38
  • WPvivid — Backup, Migration & Staging 0.9.39
  • WPvivid — Backup, Migration & Staging 0.9.40
  • WPvivid — Backup, Migration & Staging 0.9.41
  • WPvivid — Backup, Migration & Staging 0.9.42
  • WPvivid — Backup, Migration & Staging 0.9.43
  • WPvivid — Backup, Migration & Staging 0.9.44
  • WPvivid — Backup, Migration & Staging 0.9.45
  • WPvivid — Backup, Migration & Staging 0.9.46
  • WPvivid — Backup, Migration & Staging 0.9.47
  • WPvivid — Backup, Migration & Staging 0.9.48
  • WPvivid — Backup, Migration & Staging 0.9.49
  • WPvivid — Backup, Migration & Staging 0.9.50
  • WPvivid — Backup, Migration & Staging 0.9.51
  • WPvivid — Backup, Migration & Staging 0.9.52
  • WPvivid — Backup, Migration & Staging 0.9.53
  • WPvivid — Backup, Migration & Staging 0.9.54
  • WPvivid — Backup, Migration & Staging 0.9.55
  • WPvivid — Backup, Migration & Staging 0.9.56
  • WPvivid — Backup, Migration & Staging 0.9.57
  • WPvivid — Backup, Migration & Staging 0.9.58
  • WPvivid — Backup, Migration & Staging 0.9.59
  • WPvivid — Backup, Migration & Staging 0.9.60
  • WPvivid — Backup, Migration & Staging 0.9.61
  • WPvivid — Backup, Migration & Staging 0.9.62
  • WPvivid — Backup, Migration & Staging 0.9.63
  • WPvivid — Backup, Migration & Staging 0.9.64
  • WPvivid — Backup, Migration & Staging 0.9.65
  • WPvivid — Backup, Migration & Staging 0.9.66
  • WPvivid — Backup, Migration & Staging 0.9.67
  • WPvivid — Backup, Migration & Staging 0.9.68
  • WPvivid — Backup, Migration & Staging 0.9.69
  • WPvivid — Backup, Migration & Staging 0.9.70
  • WPvivid — Backup, Migration & Staging 0.9.71
  • WPvivid — Backup, Migration & Staging 0.9.72
  • WPvivid — Backup, Migration & Staging 0.9.73
  • WPvivid — Backup, Migration & Staging 0.9.74
  • WPvivid — Backup, Migration & Staging 0.9.75
  • WPvivid — Backup, Migration & Staging 0.9.76
  • WPvivid — Backup, Migration & Staging 0.9.77
  • WPvivid — Backup, Migration & Staging 0.9.78
  • WPvivid — Backup, Migration & Staging 0.9.79
  • WPvivid — Backup, Migration & Staging 0.9.80
  • WPvivid — Backup, Migration & Staging 0.9.81
  • WPvivid — Backup, Migration & Staging 0.9.82
  • WPvivid — Backup, Migration & Staging 0.9.83
  • WPvivid — Backup, Migration & Staging 0.9.84
  • WPvivid — Backup, Migration & Staging 0.9.85
  • WPvivid — Backup, Migration & Staging 0.9.86
  • WPvivid — Backup, Migration & Staging 0.9.87
  • WPvivid — Backup, Migration & Staging 0.9.88
  • WPvivid — Backup, Migration & Staging 0.9.89
  • WPvivid — Backup, Migration & Staging 0.9.90
  • WPvivid — Backup, Migration & Staging 0.9.91
  • WPvivid — Backup, Migration & Staging 0.9.92
  • WPvivid — Backup, Migration & Staging 0.9.93
  • WPvivid — Backup, Migration & Staging 0.9.94
  • WPvivid — Backup, Migration & Staging 0.9.95
  • WPvivid — Backup, Migration & Staging 0.9.96
  • WPvivid — Backup, Migration & Staging 0.9.97
  • WPvivid — Backup, Migration & Staging 0.9.98
  • WPvivid — Backup, Migration & Staging 0.9.99
  • WPvivid — Backup, Migration & Staging 0.9.100
  • WPvivid — Backup, Migration & Staging 0.9.101
  • WPvivid — Backup, Migration & Staging 0.9.102
  • WPvivid — Backup, Migration & Staging 0.9.103
  • WPvivid — Backup, Migration & Staging 0.9.104
  • WPvivid — Backup, Migration & Staging 0.9.105
  • WPvivid — Backup, Migration & Staging 0.9.106
  • WPvivid — Backup, Migration & Staging 0.9.107
  • WPvivid — Backup, Migration & Staging 0.9.108
  • WPvivid — Backup, Migration & Staging 0.9.109
  • WPvivid — Backup, Migration & Staging 0.9.110
  • WPvivid — Backup, Migration & Staging 0.9.111
  • WPvivid — Backup, Migration & Staging 0.9.112
  • WPvivid — Backup, Migration & Staging 0.9.113
  • WPvivid — Backup, Migration & Staging 0.9.114
  • WPvivid — Backup, Migration & Staging 0.9.115
  • WPvivid — Backup, Migration & Staging 0.9.116
  • WPvivid — Backup, Migration & Staging 0.9.117
  • WPvivid — Backup, Migration & Staging 0.9.118
  • WPvivid — Backup, Migration & Staging 0.9.119
  • WPvivid — Backup, Migration & Staging 0.9.120
  • WPvivid — Backup, Migration & Staging 0.9.121
  • WPvivid — Backup, Migration & Staging 0.9.122
  • WPvivid — Backup, Migration & Staging 0.9.123
  • WPvivid — Backup, Migration & Staging 0.9.124
  • WPvivid — Backup, Migration & Staging 0.9.125
  • WPvivid — Backup, Migration & Staging 0.9.126
  • WPvivid — Backup, Migration & Staging 0.9.127
  • WPvivid — Backup, Migration & Staging 0.9.128
  • WPvivid — Backup, Migration & Staging 0.9.129
  • WPvivid — Backup, Migration & Staging 0.9.130
  • WPvivid — Backup, Migration & Staging 0.9.131
  • WPvivid — Backup, Migration & Staging 0.9.132
  • WPvivid — Backup, Migration & Staging 0.9.133
  • WPvivid — Backup, Migration & Staging 0.9.134
  • WPvivid — Backup, Migration & Staging 0.9.136

Arbitrary File Upload in Make Connector Media Upload

Skrevet den af i Make Connector

Make Connector’s REST media upload handler copied the uploaded file into the uploads directory under its client-supplied name before checking the file type, so a rejected file such as a .php script was already on disk when the error was returned. An attacker holding the plugin’s API key (Administrator-level access) could upload and then execute arbitrary PHP on the server. Affects versions up to and including 1.5.10; fixed in 1.6.0.

This vulnerability affects the following application versions:

  • Make Connector 1.5
  • Make Connector 1.5.1
  • Make Connector 1.5.2
  • Make Connector 1.5.3
  • Make Connector 1.5.4
  • Make Connector 1.5.5
  • Make Connector 1.5.6
  • Make Connector 1.5.7
  • Make Connector 1.5.8
  • Make Connector 1.5.9
  • Make Connector 1.5.10

Stored Cross-Site Scripting in ElementsKit Simple Tab Widget

Skrevet den af i ElementsKit Elementor Addons and Templates

A user with Contributor account can store JavaScript in a Simple Tab widget title, which ElementsKit renders unescaped on the front end. The script then runs for every visitor who views the page. Affects ElementsKit Lite 2.8.8 to 3.7.9.

This vulnerability affects the following application versions:

  • ElementsKit Elementor Addons and Templates 2.8.8
  • ElementsKit Elementor Addons and Templates 2.9.0
  • ElementsKit Elementor Addons and Templates 2.9.1
  • ElementsKit Elementor Addons and Templates 2.9.2
  • ElementsKit Elementor Addons and Templates 3.0.0
  • ElementsKit Elementor Addons and Templates 3.0.1
  • ElementsKit Elementor Addons and Templates 3.0.2
  • ElementsKit Elementor Addons and Templates 3.0.3
  • ElementsKit Elementor Addons and Templates 3.0.4
  • ElementsKit Elementor Addons and Templates 3.0.5
  • ElementsKit Elementor Addons and Templates 3.0.6
  • ElementsKit Elementor Addons and Templates 3.0.7
  • ElementsKit Elementor Addons and Templates 3.1.0
  • ElementsKit Elementor Addons and Templates 3.1.1
  • ElementsKit Elementor Addons and Templates 3.1.2
  • ElementsKit Elementor Addons and Templates 3.1.3
  • ElementsKit Elementor Addons and Templates 3.1.4
  • ElementsKit Elementor Addons and Templates 3.2.0
  • ElementsKit Elementor Addons and Templates 3.2.1
  • ElementsKit Elementor Addons and Templates 3.2.2
  • ElementsKit Elementor Addons and Templates 3.2.3
  • ElementsKit Elementor Addons and Templates 3.2.4
  • ElementsKit Elementor Addons and Templates 3.2.5
  • ElementsKit Elementor Addons and Templates 3.2.6
  • ElementsKit Elementor Addons and Templates 3.2.7
  • ElementsKit Elementor Addons and Templates 3.2.8
  • ElementsKit Elementor Addons and Templates 3.2.9
  • ElementsKit Elementor Addons and Templates 3.3.0
  • ElementsKit Elementor Addons and Templates 3.3.1
  • ElementsKit Elementor Addons and Templates 3.3.2
  • ElementsKit Elementor Addons and Templates 3.3.3
  • ElementsKit Elementor Addons and Templates 3.3.4
  • ElementsKit Elementor Addons and Templates 3.3.5
  • ElementsKit Elementor Addons and Templates 3.3.6
  • ElementsKit Elementor Addons and Templates 3.3.7
  • ElementsKit Elementor Addons and Templates 3.3.8
  • ElementsKit Elementor Addons and Templates 3.3.9
  • ElementsKit Elementor Addons and Templates 3.4.0
  • ElementsKit Elementor Addons and Templates 3.4.1
  • ElementsKit Elementor Addons and Templates 3.4.2
  • ElementsKit Elementor Addons and Templates 3.4.3
  • ElementsKit Elementor Addons and Templates 3.4.4
  • ElementsKit Elementor Addons and Templates 3.4.5
  • ElementsKit Elementor Addons and Templates 3.4.6
  • ElementsKit Elementor Addons and Templates 3.4.7
  • ElementsKit Elementor Addons and Templates 3.4.8
  • ElementsKit Elementor Addons and Templates 3.4.9
  • ElementsKit Elementor Addons and Templates 3.5.0
  • ElementsKit Elementor Addons and Templates 3.5.1
  • ElementsKit Elementor Addons and Templates 3.5.2
  • ElementsKit Elementor Addons and Templates 3.5.3
  • ElementsKit Elementor Addons and Templates 3.5.4
  • ElementsKit Elementor Addons and Templates 3.5.5
  • ElementsKit Elementor Addons and Templates 3.5.6
  • ElementsKit Elementor Addons and Templates 3.6.0
  • ElementsKit Elementor Addons and Templates 3.6.1
  • ElementsKit Elementor Addons and Templates 3.7.0
  • ElementsKit Elementor Addons and Templates 3.7.1
  • ElementsKit Elementor Addons and Templates 3.7.2
  • ElementsKit Elementor Addons and Templates 3.7.3
  • ElementsKit Elementor Addons and Templates 3.7.4
  • ElementsKit Elementor Addons and Templates 3.7.5
  • ElementsKit Elementor Addons and Templates 3.7.6
  • ElementsKit Elementor Addons and Templates 3.7.7
  • ElementsKit Elementor Addons and Templates 3.7.8
  • ElementsKit Elementor Addons and Templates 3.7.9

Unauthenticated PHP Object Injection in GiveWP Donation and Donor Meta

Skrevet den af i GiveWP – Donation Plugin

GiveWP up to 3.19.4 wrote donation-form fields such as the billing address (card_address) straight into its donation and donor meta tables, bypassing WordPress meta serialisation. A serialised PHP object submitted by an unauthenticated donor is therefore instantiated whenever that meta is read back, which can lead to remote code execution if a POP chain is present on the site.

This vulnerability affects the following application versions:

  • GiveWP – Donation Plugin 2.19.6
  • GiveWP – Donation Plugin 2.19.7
  • GiveWP – Donation Plugin 2.19.8
  • GiveWP – Donation Plugin 2.20.0
  • GiveWP – Donation Plugin 2.20.1
  • GiveWP – Donation Plugin 2.20.2
  • GiveWP – Donation Plugin 2.21.0
  • GiveWP – Donation Plugin 2.21.1
  • GiveWP – Donation Plugin 2.21.2
  • GiveWP – Donation Plugin 2.21.3
  • GiveWP – Donation Plugin 2.21.4
  • GiveWP – Donation Plugin 2.22.0
  • GiveWP – Donation Plugin 2.22.1
  • GiveWP – Donation Plugin 2.22.2
  • GiveWP – Donation Plugin 2.22.3
  • GiveWP – Donation Plugin 2.23.0
  • GiveWP – Donation Plugin 2.23.1
  • GiveWP – Donation Plugin 2.23.2
  • GiveWP – Donation Plugin 2.24.0
  • GiveWP – Donation Plugin 2.24.1
  • GiveWP – Donation Plugin 2.24.2
  • GiveWP – Donation Plugin 2.25.0
  • GiveWP – Donation Plugin 2.25.1
  • GiveWP – Donation Plugin 2.25.2
  • GiveWP – Donation Plugin 2.25.3
  • GiveWP – Donation Plugin 2.26.0
  • GiveWP – Donation Plugin 2.27.0
  • GiveWP – Donation Plugin 2.27.1
  • GiveWP – Donation Plugin 2.27.2
  • GiveWP – Donation Plugin 2.27.3
  • GiveWP – Donation Plugin 2.28.0
  • GiveWP – Donation Plugin 2.29.0
  • GiveWP – Donation Plugin 2.29.1
  • GiveWP – Donation Plugin 2.29.2
  • GiveWP – Donation Plugin 2.30.0
  • GiveWP – Donation Plugin 2.31.0
  • GiveWP – Donation Plugin 2.31.1
  • GiveWP – Donation Plugin 2.32.0
  • GiveWP – Donation Plugin 2.33.0
  • GiveWP – Donation Plugin 2.33.1
  • GiveWP – Donation Plugin 2.33.2
  • GiveWP – Donation Plugin 2.33.3
  • GiveWP – Donation Plugin 2.33.4
  • GiveWP – Donation Plugin 2.33.5
  • GiveWP – Donation Plugin 3.0.0
  • GiveWP – Donation Plugin 3.0.1
  • GiveWP – Donation Plugin 3.0.2
  • GiveWP – Donation Plugin 3.0.3
  • GiveWP – Donation Plugin 3.0.4
  • GiveWP – Donation Plugin 3.1.0
  • GiveWP – Donation Plugin 3.1.1
  • GiveWP – Donation Plugin 3.1.2
  • GiveWP – Donation Plugin 3.2.0
  • GiveWP – Donation Plugin 3.2.1
  • GiveWP – Donation Plugin 3.2.2
  • GiveWP – Donation Plugin 3.3.0
  • GiveWP – Donation Plugin 3.3.1
  • GiveWP – Donation Plugin 3.4.0
  • GiveWP – Donation Plugin 3.4.1
  • GiveWP – Donation Plugin 3.4.2
  • GiveWP – Donation Plugin 3.5.0
  • GiveWP – Donation Plugin 3.5.1
  • GiveWP – Donation Plugin 3.6.0
  • GiveWP – Donation Plugin 3.6.1
  • GiveWP – Donation Plugin 3.6.2
  • GiveWP – Donation Plugin 3.7.0
  • GiveWP – Donation Plugin 3.8.0
  • GiveWP – Donation Plugin 3.9.0
  • GiveWP – Donation Plugin 3.10.0
  • GiveWP – Donation Plugin 3.11.0
  • GiveWP – Donation Plugin 3.12.0
  • GiveWP – Donation Plugin 3.12.1
  • GiveWP – Donation Plugin 3.12.2
  • GiveWP – Donation Plugin 3.12.3
  • GiveWP – Donation Plugin 3.13.0
  • GiveWP – Donation Plugin 3.14.0
  • GiveWP – Donation Plugin 3.14.1
  • GiveWP – Donation Plugin 3.14.2
  • GiveWP – Donation Plugin 3.15.0
  • GiveWP – Donation Plugin 3.15.1
  • GiveWP – Donation Plugin 3.16.0
  • GiveWP – Donation Plugin 3.16.1
  • GiveWP – Donation Plugin 3.16.2
  • GiveWP – Donation Plugin 3.16.3
  • GiveWP – Donation Plugin 3.16.4
  • GiveWP – Donation Plugin 3.16.5
  • GiveWP – Donation Plugin 3.17.0
  • GiveWP – Donation Plugin 3.17.1
  • GiveWP – Donation Plugin 3.17.2
  • GiveWP – Donation Plugin 3.18.0
  • GiveWP – Donation Plugin 3.19.0
  • GiveWP – Donation Plugin 3.19.1
  • GiveWP – Donation Plugin 3.19.2
  • GiveWP – Donation Plugin 3.19.3
  • GiveWP – Donation Plugin 3.19.4

Arbitrary File Upload in GoDAM WPForms Record Field

Skrevet den af i GoDAM

The GoDAM WPForms integration saved files sent with a WPForms form submission by trusting the client-supplied MIME type and keeping the original file name, moving them into the public uploads/godam/wpforms directory. Unauthenticated visitors could upload PHP or other executable files to the server, which can lead to remote code execution. Sites running GoDAM together with WPForms are at risk.

This vulnerability affects the following application versions:

  • GoDAM 1.3.0
  • GoDAM 1.3.1
  • GoDAM 1.3.2
  • GoDAM 1.3.3
  • GoDAM 1.3.4
  • GoDAM 1.3.5
  • GoDAM 1.4.0
  • GoDAM 1.4.1
  • GoDAM 1.4.2
  • GoDAM 1.4.3
  • GoDAM 1.4.4
  • GoDAM 1.4.5
  • GoDAM 1.4.6
  • GoDAM 1.4.7
  • GoDAM 1.4.8
  • GoDAM 1.4.9
  • GoDAM 1.5.0
  • GoDAM 1.6.0
  • GoDAM 1.7.0
  • GoDAM 1.7.1
  • GoDAM 1.7.2
  • GoDAM 1.8.0
  • GoDAM 1.9.0
  • GoDAM 1.10.1
  • GoDAM 1.10.2
  • GoDAM 1.11.0
  • GoDAM 1.11.1
  • GoDAM 1.11.2
  • GoDAM 1.12.0
  • GoDAM 1.12.1
  • GoDAM 1.12.2

Insecure Direct Object Reference in LatePoint Booking Steps

Skrevet den af i LatePoint

The booking step loader fetched an existing booking by id without checking it belongs to the requesting customer, letting a visitor read or alter someone else’s booking. The fix verifies ownership and refuses otherwise. Fixed in 5.2.7.

This vulnerability affects the following application versions:

  • LatePoint 5.1.0
  • LatePoint 5.1.1
  • LatePoint 5.1.2
  • LatePoint 5.1.3
  • LatePoint 5.1.4
  • LatePoint 5.1.5
  • LatePoint 5.1.6
  • LatePoint 5.1.7
  • LatePoint 5.1.8
  • LatePoint 5.1.9
  • LatePoint 5.1.91
  • LatePoint 5.1.92
  • LatePoint 5.1.93
  • LatePoint 5.1.94
  • LatePoint 5.2.0
  • LatePoint 5.2.1
  • LatePoint 5.2.2
  • LatePoint 5.2.3
  • LatePoint 5.2.4
  • LatePoint 5.2.5
  • LatePoint 5.2.6

Stored Cross-Site Scripting and DoS in WordPress Interactivity API Runtime

Skrevet den af i WordPress

Users with the Contributor role or above could store Interactivity API directives in post content that the client-side runtime processed unsafely: javascript: URLs and on* event-handler attributes through data-wp-bind, prototype pollution through data-wp-context JSON, directive names and namespaces, and post-content elements shadowing the Interactivity script-module data by ID. Anyone viewing the post, including administrators, could have attacker-controlled script run in their browser, or the page’s interactive blocks could stop working. Fixed in WordPress 7.1.4 and the matching 7.0.8 … 6.4.14 branch releases.

This vulnerability affects the following application versions:

  • WordPress 6.4
  • WordPress 6.4.1
  • WordPress 6.4.2
  • WordPress 6.4.3
  • WordPress 6.4.4
  • WordPress 6.4.5
  • WordPress 6.4.6
  • WordPress 6.4.7
  • WordPress 6.4.8
  • WordPress 6.4.9
  • WordPress 6.4.10
  • WordPress 6.4.11
  • WordPress 6.4.12
  • WordPress 6.4.13
  • WordPress 6.5
  • WordPress 6.5.2
  • WordPress 6.5.3
  • WordPress 6.5.4
  • WordPress 6.5.5
  • WordPress 6.5.6
  • WordPress 6.5.7
  • WordPress 6.5.8
  • WordPress 6.5.9
  • WordPress 6.5.10
  • WordPress 6.5.11
  • WordPress 6.5.12
  • WordPress 6.5.13
  • WordPress 6.6
  • WordPress 6.6.1
  • WordPress 6.6.2
  • WordPress 6.6.3
  • WordPress 6.6.4
  • WordPress 6.6.5
  • WordPress 6.6.6
  • WordPress 6.6.7
  • WordPress 6.6.8
  • WordPress 6.6.9
  • WordPress 6.6.10
  • WordPress 6.7
  • WordPress 6.7.1
  • WordPress 6.7.2
  • WordPress 6.7.3
  • WordPress 6.7.4
  • WordPress 6.7.5
  • WordPress 6.7.6
  • WordPress 6.7.7
  • WordPress 6.7.8
  • WordPress 6.7.9
  • WordPress 6.7.10
  • WordPress 6.8
  • WordPress 6.8.1
  • WordPress 6.8.2
  • WordPress 6.8.3
  • WordPress 6.8.4
  • WordPress 6.8.5
  • WordPress 6.8.6
  • WordPress 6.8.7
  • WordPress 6.8.8
  • WordPress 6.8.9
  • WordPress 6.8.10
  • WordPress 6.8.11
  • WordPress 6.9
  • WordPress 6.9.1
  • WordPress 6.9.2
  • WordPress 6.9.3
  • WordPress 6.9.4
  • WordPress 6.9.5
  • WordPress 6.9.6
  • WordPress 6.9.7
  • WordPress 6.9.8
  • WordPress 6.9.9
  • WordPress 6.9.10
  • WordPress 7.0
  • WordPress 7.0.1
  • WordPress 7.0.2
  • WordPress 7.0.3
  • WordPress 7.0.4
  • WordPress 7.0.5
  • WordPress 7.0.6
  • WordPress 7.0.7
  • WordPress 7.1
  • WordPress 7.1.1
  • WordPress 7.1.2
  • WordPress 7.1.3

Unauthenticated Account Takeover in Branda Signup Password

Skrevet den af i Branda

Branda’s Signup Password feature hooked the random_password filter and returned the request’s password_1 value, so every random value WordPress generated during that request, including a lost-password reset key, became attacker-chosen. Unauthenticated attackers can request a password reset for any account, including administrators, use the known reset key to set a new password, and take the account over. Sites are affected when the Login Screen module’s Signup Password option is enabled.

This vulnerability affects the following application versions:

  • Branda 3.3.1
  • Branda 3.3.2
  • Branda 3.4.0
  • Branda 3.4.1
  • Branda 3.4.3
  • Branda 3.4.4
  • Branda 3.4.5
  • Branda 3.4.5.1
  • Branda 3.4.6
  • Branda 3.4.7
  • Branda 3.4.8
  • Branda 3.4.8.1
  • Branda 3.4.9
  • Branda 3.4.9.1
  • Branda 3.4.9.3
  • Branda 3.4.10
  • Branda 3.4.11
  • Branda 3.4.13
  • Branda 3.4.14
  • Branda 3.4.15
  • Branda 3.4.16
  • Branda 3.4.17
  • Branda 3.4.18
  • Branda 3.4.19
  • Branda 3.4.21
  • Branda 3.4.22
  • Branda 3.4.23
  • Branda 3.4.24
  • Branda 3.4.25
  • Branda 3.4.26
  • Branda 3.4.27
  • Branda 3.4.28

Dangerous File Type Upload (.phar/.svg) in Drag and Drop Multiple File Upload for Contact Form 7

Skrevet den af i Drag and Drop Multiple File Upload for CF7

The plugin’s unauthenticated upload handler does not block .phar and .svg files. An attacker can upload a .phar file, which leads to remote code execution on servers that execute .phar as PHP, or an .svg file carrying stored cross-site scripting.

This vulnerability affects the following application versions:

  • Drag and Drop Multiple File Upload for CF7 1.3.3.3.1
  • Drag and Drop Multiple File Upload for CF7 1.3.3.3.2
  • Drag and Drop Multiple File Upload for CF7 1.3.4
  • Drag and Drop Multiple File Upload for CF7 1.3.5
  • Drag and Drop Multiple File Upload for CF7 1.3.5.1
  • Drag and Drop Multiple File Upload for CF7 1.3.5.4
  • Drag and Drop Multiple File Upload for CF7 1.3.5.5.1
  • Drag and Drop Multiple File Upload for CF7 1.3.5.7
  • Drag and Drop Multiple File Upload for CF7 1.3.5.8
  • Drag and Drop Multiple File Upload for CF7 1.3.5.9
  • Drag and Drop Multiple File Upload for CF7 1.3.6.1
  • Drag and Drop Multiple File Upload for CF7 1.3.6.2
  • Drag and Drop Multiple File Upload for CF7 1.3.6.3
  • Drag and Drop Multiple File Upload for CF7 1.3.6.4
  • Drag and Drop Multiple File Upload for CF7 1.3.6.5
  • Drag and Drop Multiple File Upload for CF7 1.3.6.6
  • Drag and Drop Multiple File Upload for CF7 1.3.6.7
  • Drag and Drop Multiple File Upload for CF7 1.3.6.8
  • Drag and Drop Multiple File Upload for CF7 1.3.6.9
  • Drag and Drop Multiple File Upload for CF7 1.3.7.1
  • Drag and Drop Multiple File Upload for CF7 1.3.7.2
  • Drag and Drop Multiple File Upload for CF7 1.3.7.3
  • Drag and Drop Multiple File Upload for CF7 1.3.7.4
  • Drag and Drop Multiple File Upload for CF7 1.3.7.5
  • Drag and Drop Multiple File Upload for CF7 1.3.7.6
  • Drag and Drop Multiple File Upload for CF7 1.3.7.7
  • Drag and Drop Multiple File Upload for CF7 1.3.7.8
  • Drag and Drop Multiple File Upload for CF7 1.3.7.9
  • Drag and Drop Multiple File Upload for CF7 1.3.8.0
  • Drag and Drop Multiple File Upload for CF7 1.3.8.1
  • Drag and Drop Multiple File Upload for CF7 1.3.8.2
  • Drag and Drop Multiple File Upload for CF7 1.3.8.3
  • Drag and Drop Multiple File Upload for CF7 1.3.8.4
  • Drag and Drop Multiple File Upload for CF7 1.3.8.5
  • Drag and Drop Multiple File Upload for CF7 1.3.8.6
  • Drag and Drop Multiple File Upload for CF7 1.3.8.7
  • Drag and Drop Multiple File Upload for CF7 1.3.8.8
  • Drag and Drop Multiple File Upload for CF7 1.3.8.9
  • Drag and Drop Multiple File Upload for CF7 1.3.9.0
  • Drag and Drop Multiple File Upload for CF7 1.3.9.1
  • Drag and Drop Multiple File Upload for CF7 1.3.9.2

Stored Cross-Site Scripting in Ultimate Addons for Elementor Navigation Menu Icons

Skrevet den af i Ultimate Addons for Elementor

The Navigation Menu widget read its toggle and close icon markup from data- attributes and injected it into the page as HTML without sanitising it. A contributor-level user who can edit a widget could store arbitrary markup that executes JavaScript in the browser of anyone viewing the page.

This vulnerability affects the following application versions:

  • Ultimate Addons for Elementor 1.5.2
  • Ultimate Addons for Elementor 1.5.3
  • Ultimate Addons for Elementor 1.5.4
  • Ultimate Addons for Elementor 1.5.5
  • Ultimate Addons for Elementor 1.5.6
  • Ultimate Addons for Elementor 1.5.7
  • Ultimate Addons for Elementor 1.5.8
  • Ultimate Addons for Elementor 1.5.9
  • Ultimate Addons for Elementor 1.6.0
  • Ultimate Addons for Elementor 1.6.1
  • Ultimate Addons for Elementor 1.6.2
  • Ultimate Addons for Elementor 1.6.3
  • Ultimate Addons for Elementor 1.6.4
  • Ultimate Addons for Elementor 1.6.5
  • Ultimate Addons for Elementor 1.6.6
  • Ultimate Addons for Elementor 1.6.7
  • Ultimate Addons for Elementor 1.6.8
  • Ultimate Addons for Elementor 1.6.9
  • Ultimate Addons for Elementor 1.6.10
  • Ultimate Addons for Elementor 1.6.11
  • Ultimate Addons for Elementor 1.6.12
  • Ultimate Addons for Elementor 1.6.13
  • Ultimate Addons for Elementor 1.6.14
  • Ultimate Addons for Elementor 1.6.15
  • Ultimate Addons for Elementor 1.6.16
  • Ultimate Addons for Elementor 1.6.17
  • Ultimate Addons for Elementor 1.6.18
  • Ultimate Addons for Elementor 1.6.19
  • Ultimate Addons for Elementor 1.6.20
  • Ultimate Addons for Elementor 1.6.21
  • Ultimate Addons for Elementor 1.6.22
  • Ultimate Addons for Elementor 1.6.23
  • Ultimate Addons for Elementor 1.6.24
  • Ultimate Addons for Elementor 1.6.25
  • Ultimate Addons for Elementor 1.6.26
  • Ultimate Addons for Elementor 1.6.27
  • Ultimate Addons for Elementor 1.6.28
  • Ultimate Addons for Elementor 1.6.29
  • Ultimate Addons for Elementor 1.6.30
  • Ultimate Addons for Elementor 1.6.31
  • Ultimate Addons for Elementor 1.6.32
  • Ultimate Addons for Elementor 1.6.33
  • Ultimate Addons for Elementor 1.6.34
  • Ultimate Addons for Elementor 1.6.35
  • Ultimate Addons for Elementor 1.6.36
  • Ultimate Addons for Elementor 1.6.37
  • Ultimate Addons for Elementor 1.6.38
  • Ultimate Addons for Elementor 1.6.39
  • Ultimate Addons for Elementor 1.6.40
  • Ultimate Addons for Elementor 1.6.41
  • Ultimate Addons for Elementor 1.6.42
  • Ultimate Addons for Elementor 1.6.43
  • Ultimate Addons for Elementor 1.6.44
  • Ultimate Addons for Elementor 1.6.45
  • Ultimate Addons for Elementor 1.6.46
  • Ultimate Addons for Elementor 1.6.47
  • Ultimate Addons for Elementor 2.0.0
  • Ultimate Addons for Elementor 2.0.1
  • Ultimate Addons for Elementor 2.0.2
  • Ultimate Addons for Elementor 2.0.3
  • Ultimate Addons for Elementor 2.0.4
  • Ultimate Addons for Elementor 2.0.5
  • Ultimate Addons for Elementor 2.0.6
  • Ultimate Addons for Elementor 2.1.0
  • Ultimate Addons for Elementor 2.2.0
  • Ultimate Addons for Elementor 2.2.1
  • Ultimate Addons for Elementor 2.2.2
  • Ultimate Addons for Elementor 2.2.3
  • Ultimate Addons for Elementor 2.2.4
  • Ultimate Addons for Elementor 2.3.0
  • Ultimate Addons for Elementor 2.3.1
  • Ultimate Addons for Elementor 2.3.2
  • Ultimate Addons for Elementor 2.4.0
  • Ultimate Addons for Elementor 2.4.1
  • Ultimate Addons for Elementor 2.4.2
  • Ultimate Addons for Elementor 2.4.3
  • Ultimate Addons for Elementor 2.4.4
  • Ultimate Addons for Elementor 2.4.5
  • Ultimate Addons for Elementor 2.4.6
  • Ultimate Addons for Elementor 2.4.7
  • Ultimate Addons for Elementor 2.4.8
  • Ultimate Addons for Elementor 2.4.9
  • Ultimate Addons for Elementor 2.5.0
  • Ultimate Addons for Elementor 2.5.1
  • Ultimate Addons for Elementor 2.5.2
  • Ultimate Addons for Elementor 2.6.0
  • Ultimate Addons for Elementor 2.6.1
  • Ultimate Addons for Elementor 2.6.2
  • Ultimate Addons for Elementor 2.7.0
  • Ultimate Addons for Elementor 2.7.1
  • Ultimate Addons for Elementor 2.8.0
  • Ultimate Addons for Elementor 2.8.1
  • Ultimate Addons for Elementor 2.8.2
  • Ultimate Addons for Elementor 2.8.3
  • Ultimate Addons for Elementor 2.8.4
  • Ultimate Addons for Elementor 2.8.5
  • Ultimate Addons for Elementor 2.8.6
  • Ultimate Addons for Elementor 2.8.7
  • Ultimate Addons for Elementor 2.8.8
  • Ultimate Addons for Elementor 2.9.0
  • Ultimate Addons for Elementor 2.9.1

Unauthenticated Arbitrary File Copy in WP Webhooks

Skrevet den af i WP Webhooks

WP Webhooks up to 3.3.5 copies files using paths taken from request data without validating them. When a Contact Form 7 webhook preserves uploaded form files, an unauthenticated visitor can submit the form with crafted values and copy any readable file on the server, such as wp-config.php, to a web-accessible location, exposing the database credentials.

This vulnerability affects the following application versions:

  • WP Webhooks 3.2.0
  • WP Webhooks 3.2.1
  • WP Webhooks 3.3.0
  • WP Webhooks 3.3.1
  • WP Webhooks 3.3.2
  • WP Webhooks 3.3.3
  • WP Webhooks 3.3.4
  • WP Webhooks 3.3.5

Unauthenticated Settings Update and Directory Deletion in OMGF

Skrevet den af i OMGF

OMGF 5.6.0 through 5.7.9 saves its settings form on admin_init without a working capability and nonce check, so unauthenticated visitors can change the plugin’s settings, which allows stored cross-site scripting and the deletion of directories through the cache-cleanup routine. The patch requires the manage_options capability and a valid settings nonce, and skips cache directories whose path does not resolve to itself.

This vulnerability affects the following application versions:

  • OMGF 5.6.0
  • OMGF 5.6.1
  • OMGF 5.6.2
  • OMGF 5.6.3
  • OMGF 5.6.4
  • OMGF 5.6.5
  • OMGF 5.6.6
  • OMGF 5.6.7
  • OMGF 5.7.0
  • OMGF 5.7.1
  • OMGF 5.7.2
  • OMGF 5.7.4
  • OMGF 5.7.5
  • OMGF 5.7.6
  • OMGF 5.7.7
  • OMGF 5.7.8
  • OMGF 5.7.9

SQL Injection in Amelia Booking Payments Sort and Package Coupon Filter

Skrevet den af i Amelia Booking

Two SQL injection sinks: the payments list builds its ORDER BY column from the request sort parameter with no allowlist, and the package-customer filter interpolates couponId straight into the WHERE clause. Fixed in 2.1.2.

This vulnerability affects the following application versions:

  • Amelia Booking 1.2.1
  • Amelia Booking 1.2.2
  • Amelia Booking 1.2.3
  • Amelia Booking 1.2.4
  • Amelia Booking 1.2.5
  • Amelia Booking 1.2.6
  • Amelia Booking 1.2.7
  • Amelia Booking 1.2.8
  • Amelia Booking 1.2.9
  • Amelia Booking 1.2.10
  • Amelia Booking 1.2.11
  • Amelia Booking 1.2.12
  • Amelia Booking 1.2.13
  • Amelia Booking 1.2.14
  • Amelia Booking 1.2.15
  • Amelia Booking 1.2.16
  • Amelia Booking 1.2.17
  • Amelia Booking 1.2.18
  • Amelia Booking 1.2.19
  • Amelia Booking 1.2.20
  • Amelia Booking 1.2.21
  • Amelia Booking 1.2.22
  • Amelia Booking 1.2.23
  • Amelia Booking 1.2.24
  • Amelia Booking 1.2.25
  • Amelia Booking 1.2.26
  • Amelia Booking 1.2.27
  • Amelia Booking 1.2.28
  • Amelia Booking 1.2.29
  • Amelia Booking 1.2.30
  • Amelia Booking 1.2.31
  • Amelia Booking 1.2.32
  • Amelia Booking 1.2.33
  • Amelia Booking 1.2.34
  • Amelia Booking 1.2.35
  • Amelia Booking 1.2.36
  • Amelia Booking 1.2.37
  • Amelia Booking 1.2.38
  • Amelia Booking 2.0
  • Amelia Booking 2.0.1
  • Amelia Booking 2.0.2
  • Amelia Booking 2.1
  • Amelia Booking 2.1.1

Stored XSS via unsafe preg_replace() replacements in WordPress Image lightbox and Playlist blocks

Skrevet den af i WordPress

The Image block’s lightbox renderer and the Playlist block inserted markup with preg_replace() and used block-derived HTML as the replacement string, so $0, or $1 sequences in a user-authored image tag or playlist waveform setting were expanded into a copy of the tag’s own markup. That breaks the attribute quoting and lets a Contributor turn part of an attribute value into new attributes of the rendered tag. WordPress 7.1.4 inserts the markup with the HTML API instead.

This vulnerability affects the following application versions:

  • WordPress 6.4
  • WordPress 6.4.1
  • WordPress 6.4.2
  • WordPress 6.4.3
  • WordPress 6.4.4
  • WordPress 6.4.5
  • WordPress 6.4.6
  • WordPress 6.4.7
  • WordPress 6.4.8
  • WordPress 6.4.9
  • WordPress 6.4.10
  • WordPress 6.4.11
  • WordPress 6.4.12
  • WordPress 6.4.13
  • WordPress 6.5
  • WordPress 6.5.2
  • WordPress 6.5.3
  • WordPress 6.5.4
  • WordPress 6.5.5
  • WordPress 6.5.6
  • WordPress 6.5.7
  • WordPress 6.5.8
  • WordPress 6.5.9
  • WordPress 6.5.10
  • WordPress 6.5.11
  • WordPress 6.5.12
  • WordPress 6.5.13
  • WordPress 6.6
  • WordPress 6.6.1
  • WordPress 6.6.2
  • WordPress 6.6.3
  • WordPress 6.6.4
  • WordPress 6.6.5
  • WordPress 6.6.6
  • WordPress 6.6.7
  • WordPress 6.6.8
  • WordPress 6.6.9
  • WordPress 6.6.10
  • WordPress 6.7
  • WordPress 6.7.1
  • WordPress 6.7.2
  • WordPress 6.7.3
  • WordPress 6.7.4
  • WordPress 6.7.5
  • WordPress 6.7.6
  • WordPress 6.7.7
  • WordPress 6.7.8
  • WordPress 6.7.9
  • WordPress 6.7.10
  • WordPress 6.8
  • WordPress 6.8.1
  • WordPress 6.8.2
  • WordPress 6.8.3
  • WordPress 6.8.4
  • WordPress 6.8.5
  • WordPress 6.8.6
  • WordPress 6.8.7
  • WordPress 6.8.8
  • WordPress 6.8.9
  • WordPress 6.8.10
  • WordPress 6.8.11
  • WordPress 6.9
  • WordPress 6.9.1
  • WordPress 6.9.2
  • WordPress 6.9.3
  • WordPress 6.9.4
  • WordPress 6.9.5
  • WordPress 6.9.6
  • WordPress 6.9.7
  • WordPress 6.9.8
  • WordPress 6.9.9
  • WordPress 6.9.10
  • WordPress 7.0
  • WordPress 7.0.1
  • WordPress 7.0.2
  • WordPress 7.0.3
  • WordPress 7.0.4
  • WordPress 7.0.5
  • WordPress 7.0.6
  • WordPress 7.0.7
  • WordPress 7.1
  • WordPress 7.1.1
  • WordPress 7.1.2
  • WordPress 7.1.3

Stored Cross-Site Scripting in WordPress Interactivity API Object Bindings

Skrevet den af i WordPress

A user with the Contributor role or higher could save an element that passes KSES and give it an Interactivity API binding (data-wp-bind–data) that replaces the element’s data attribute at render time, pointing it at an arbitrary URL such as an admin page when an administrator views the post. Fixed in WordPress 7.1.4, which drops such bindings at save time and when the directives are processed.

This vulnerability affects the following application versions:

  • WordPress 6.6
  • WordPress 6.6.1
  • WordPress 6.6.2
  • WordPress 6.6.3
  • WordPress 6.6.4
  • WordPress 6.6.5
  • WordPress 6.6.6
  • WordPress 6.6.7
  • WordPress 6.6.8
  • WordPress 6.6.9
  • WordPress 6.6.10
  • WordPress 6.7
  • WordPress 6.7.1
  • WordPress 6.7.2
  • WordPress 6.7.3
  • WordPress 6.7.4
  • WordPress 6.7.5
  • WordPress 6.7.6
  • WordPress 6.7.7
  • WordPress 6.7.8
  • WordPress 6.7.9
  • WordPress 6.7.10
  • WordPress 6.8
  • WordPress 6.8.1
  • WordPress 6.8.2
  • WordPress 6.8.3
  • WordPress 6.8.4
  • WordPress 6.8.5
  • WordPress 6.8.6
  • WordPress 6.8.7
  • WordPress 6.8.8
  • WordPress 6.8.9
  • WordPress 6.8.10
  • WordPress 6.8.11
  • WordPress 6.9
  • WordPress 6.9.1
  • WordPress 6.9.2
  • WordPress 6.9.3
  • WordPress 6.9.4
  • WordPress 6.9.5
  • WordPress 6.9.6
  • WordPress 6.9.7
  • WordPress 6.9.8
  • WordPress 6.9.9
  • WordPress 6.9.10
  • WordPress 7.0
  • WordPress 7.0.1
  • WordPress 7.0.2
  • WordPress 7.0.3
  • WordPress 7.0.4
  • WordPress 7.0.5
  • WordPress 7.0.6
  • WordPress 7.0.7
  • WordPress 7.1
  • WordPress 7.1.1
  • WordPress 7.1.2
  • WordPress 7.1.3

Unauthenticated Arbitrary File Upload in Quick Playground Sync REST API

Skrevet den af i Quick Playground

Quick Playground’s sync REST endpoints compared the sync code loosely and echoed the stored code back, and the image-upload endpoint wrote a request-supplied filename and base64 body to disk without validation. An unauthenticated attacker could bypass the check, upload a PHP file outside the upload directory via path traversal and execute code on the server.

This vulnerability affects the following application versions:

  • Quick Playground 1.0.5
  • Quick Playground 1.0.6
  • Quick Playground 1.0.7
  • Quick Playground 1.0.8
  • Quick Playground 1.0.9
  • Quick Playground 1.1
  • Quick Playground 1.2
  • Quick Playground 1.2.1
  • Quick Playground 1.3
  • Quick Playground 1.3.1

Information Disclosure of Unpublished Changesets in WordPress Customizer

Skrevet den af i WordPress

WordPress 4.9 through 7.1.3 auto-load the most recent unpublished (draft, pending or scheduled) Customizer changeset for a customize-preview request that carries no changeset UUID, without checking the current user’s capabilities. An unauthenticated visitor can therefore preview the site rendered with another user’s staged, unpublished Customizer settings. Fixed in WordPress 7.1.4 by requiring the customize capability before the latest changeset is auto-loaded.

This vulnerability affects the following application versions:

  • WordPress 4.9
  • WordPress 4.9.1
  • WordPress 4.9.2
  • WordPress 4.9.3
  • WordPress 4.9.4
  • WordPress 4.9.5
  • WordPress 4.9.6
  • WordPress 4.9.7
  • WordPress 4.9.8
  • WordPress 4.9.9
  • WordPress 4.9.10
  • WordPress 4.9.11
  • WordPress 4.9.12
  • WordPress 4.9.13
  • WordPress 4.9.14
  • WordPress 4.9.15
  • WordPress 4.9.16
  • WordPress 4.9.17
  • WordPress 4.9.18
  • WordPress 4.9.19
  • WordPress 4.9.20
  • WordPress 4.9.21
  • WordPress 4.9.22
  • WordPress 4.9.23
  • WordPress 4.9.24
  • WordPress 4.9.25
  • WordPress 4.9.26
  • WordPress 4.9.27
  • WordPress 4.9.28
  • WordPress 4.9.29
  • WordPress 4.9.30
  • WordPress 4.9.31
  • WordPress 4.9.32
  • WordPress 4.9.33
  • WordPress 4.9.34
  • WordPress 5.0
  • WordPress 5.0.1
  • WordPress 5.0.2
  • WordPress 5.0.10
  • WordPress 5.0.11
  • WordPress 5.0.12
  • WordPress 5.0.13
  • WordPress 5.0.14
  • WordPress 5.0.15
  • WordPress 5.0.16
  • WordPress 5.0.17
  • WordPress 5.0.18
  • WordPress 5.0.19
  • WordPress 5.0.20
  • WordPress 5.0.21
  • WordPress 5.0.22
  • WordPress 5.0.23
  • WordPress 5.0.24
  • WordPress 5.0.25
  • WordPress 5.0.26
  • WordPress 5.0.3
  • WordPress 5.0.4
  • WordPress 5.0.6
  • WordPress 5.0.7
  • WordPress 5.0.8
  • WordPress 5.0.9
  • WordPress 5.0.27
  • WordPress 5.0.28
  • WordPress 5.0.29
  • WordPress 5.0.30
  • WordPress 5.0 Beta 1
  • WordPress 5.0 Beta 2
  • WordPress 5.0 Beta 3
  • WordPress 5.0 Beta 4
  • WordPress 5.0 RC1
  • WordPress 5.0 RC2
  • WordPress 5.0 RC3
  • WordPress 5.1
  • WordPress 5.1.1
  • WordPress 5.1.10
  • WordPress 5.1.11
  • WordPress 5.1.12
  • WordPress 5.1.13
  • WordPress 5.1.14
  • WordPress 5.1.15
  • WordPress 5.1.16
  • WordPress 5.1.17
  • WordPress 5.1.18
  • WordPress 5.1.19
  • WordPress 5.1.2
  • WordPress 5.1.20
  • WordPress 5.1.21
  • WordPress 5.1.22
  • WordPress 5.1.23
  • WordPress 5.1.24
  • WordPress 5.1.25
  • WordPress 5.1.26
  • WordPress 5.1.27
  • WordPress 5.1.3
  • WordPress 5.1.4
  • WordPress 5.1.5
  • WordPress 5.1.6
  • WordPress 5.1.7
  • WordPress 5.1.8
  • WordPress 5.1.9
  • WordPress 5.2
  • WordPress 5.2.1
  • WordPress 5.2.10
  • WordPress 5.2.11
  • WordPress 5.2.12
  • WordPress 5.2.13
  • WordPress 5.2.14
  • WordPress 5.2.15
  • WordPress 5.2.16
  • WordPress 5.2.17
  • WordPress 5.2.18
  • WordPress 5.2.19
  • WordPress 5.2.2
  • WordPress 5.2.20
  • WordPress 5.2.21
  • WordPress 5.2.22
  • WordPress 5.2.23
  • WordPress 5.2.24
  • WordPress 5.2.25
  • WordPress 5.2.26
  • WordPress 5.2.27
  • WordPress 5.2.28
  • WordPress 5.2.29
  • WordPress 5.2.3
  • WordPress 5.2.4
  • WordPress 5.2.5
  • WordPress 5.2.6
  • WordPress 5.2.7
  • WordPress 5.2.8
  • WordPress 5.2.9
  • WordPress 5.2 Beta 1
  • WordPress 5.2 Beta 2
  • WordPress 5.3
  • WordPress 5.3.1
  • WordPress 5.3.10
  • WordPress 5.3.11
  • WordPress 5.3.12
  • WordPress 5.3.13
  • WordPress 5.3.14
  • WordPress 5.3.15
  • WordPress 5.3.16
  • WordPress 5.3.17
  • WordPress 5.3.18
  • WordPress 5.3.19
  • WordPress 5.3.2
  • WordPress 5.3.20
  • WordPress 5.3.21
  • WordPress 5.3.22
  • WordPress 5.3.23
  • WordPress 5.3.24
  • WordPress 5.3.25
  • WordPress 5.3.26
  • WordPress 5.3.3
  • WordPress 5.3.4
  • WordPress 5.3.5
  • WordPress 5.3.6
  • WordPress 5.3.7
  • WordPress 5.3.8
  • WordPress 5.3.9
  • WordPress 5.4
  • WordPress 5.4.1
  • WordPress 5.4.10
  • WordPress 5.4.11
  • WordPress 5.4.12
  • WordPress 5.4.13
  • WordPress 5.4.14
  • WordPress 5.4.15
  • WordPress 5.4.16
  • WordPress 5.4.17
  • WordPress 5.4.18
  • WordPress 5.4.19
  • WordPress 5.4.2
  • WordPress 5.4.20
  • WordPress 5.4.21
  • WordPress 5.4.22
  • WordPress 5.4.23
  • WordPress 5.4.24
  • WordPress 5.4.3
  • WordPress 5.4.4
  • WordPress 5.4.5
  • WordPress 5.4.6
  • WordPress 5.4.7
  • WordPress 5.4.8
  • WordPress 5.4.9
  • WordPress 5.5
  • WordPress 5.5.1
  • WordPress 5.5.10
  • WordPress 5.5.11
  • WordPress 5.5.12
  • WordPress 5.5.13
  • WordPress 5.5.14
  • WordPress 5.5.15
  • WordPress 5.5.16
  • WordPress 5.5.17
  • WordPress 5.5.18
  • WordPress 5.5.19
  • WordPress 5.5.2
  • WordPress 5.5.20
  • WordPress 5.5.21
  • WordPress 5.5.22
  • WordPress 5.5.23
  • WordPress 5.5.3
  • WordPress 5.5.4
  • WordPress 5.5.5
  • WordPress 5.5.6
  • WordPress 5.5.7
  • WordPress 5.5.8
  • WordPress 5.5.9
  • WordPress 5.6
  • WordPress 5.6.1
  • WordPress 5.6.10
  • WordPress 5.6.11
  • WordPress 5.6.12
  • WordPress 5.6.13
  • WordPress 5.6.14
  • WordPress 5.6.15
  • WordPress 5.6.16
  • WordPress 5.6.17
  • WordPress 5.6.18
  • WordPress 5.6.19
  • WordPress 5.6.2
  • WordPress 5.6.20
  • WordPress 5.6.21
  • WordPress 5.6.22
  • WordPress 5.6.3
  • WordPress 5.6.4
  • WordPress 5.6.5
  • WordPress 5.6.6
  • WordPress 5.6.7
  • WordPress 5.6.8
  • WordPress 5.6.9
  • WordPress 5.7
  • WordPress 5.7.1
  • WordPress 5.7.10
  • WordPress 5.7.11
  • WordPress 5.7.12
  • WordPress 5.7.13
  • WordPress 5.7.14
  • WordPress 5.7.15
  • WordPress 5.7.16
  • WordPress 5.7.17
  • WordPress 5.7.18
  • WordPress 5.7.19
  • WordPress 5.7.2
  • WordPress 5.7.20
  • WordPress 5.7.3
  • WordPress 5.7.4
  • WordPress 5.7.5
  • WordPress 5.7.6
  • WordPress 5.7.7
  • WordPress 5.7.8
  • WordPress 5.7.9
  • WordPress 5.8
  • WordPress 5.8.1
  • WordPress 5.8.10
  • WordPress 5.8.11
  • WordPress 5.8.12
  • WordPress 5.8.13
  • WordPress 5.8.14
  • WordPress 5.8.15
  • WordPress 5.8.16
  • WordPress 5.8.17
  • WordPress 5.8.18
  • WordPress 5.8.2
  • WordPress 5.8.3
  • WordPress 5.8.4
  • WordPress 5.8.5
  • WordPress 5.8.6
  • WordPress 5.8.7
  • WordPress 5.8.8
  • WordPress 5.8.9
  • WordPress 5.9
  • WordPress 5.9.1
  • WordPress 5.9.10
  • WordPress 5.9.11
  • WordPress 5.9.12
  • WordPress 5.9.13
  • WordPress 5.9.14
  • WordPress 5.9.15
  • WordPress 5.9.16
  • WordPress 5.9.17
  • WordPress 5.9.18
  • WordPress 5.9.19
  • WordPress 5.9.2
  • WordPress 5.9.3
  • WordPress 5.9.4
  • WordPress 5.9.5
  • WordPress 5.9.6
  • WordPress 5.9.7
  • WordPress 5.9.8
  • WordPress 5.9.9
  • WordPress 6.0
  • WordPress 6.0.1
  • WordPress 6.0.10
  • WordPress 6.0.11
  • WordPress 6.0.12
  • WordPress 6.0.13
  • WordPress 6.0.14
  • WordPress 6.0.15
  • WordPress 6.0.16
  • WordPress 6.0.17
  • WordPress 6.0.2
  • WordPress 6.0.3
  • WordPress 6.0.4
  • WordPress 6.0.5
  • WordPress 6.0.6
  • WordPress 6.0.7
  • WordPress 6.0.8
  • WordPress 6.0.9
  • WordPress 6.1
  • WordPress 6.1.1
  • WordPress 6.1.10
  • WordPress 6.1.11
  • WordPress 6.1.12
  • WordPress 6.1.13
  • WordPress 6.1.14
  • WordPress 6.1.15
  • WordPress 6.1.2
  • WordPress 6.1.3
  • WordPress 6.1.4
  • WordPress 6.1.5
  • WordPress 6.1.6
  • WordPress 6.1.7
  • WordPress 6.1.8
  • WordPress 6.1.9
  • WordPress 6.2
  • WordPress 6.2.1
  • WordPress 6.2.10
  • WordPress 6.2.11
  • WordPress 6.2.12
  • WordPress 6.2.13
  • WordPress 6.2.14
  • WordPress 6.2.2
  • WordPress 6.2.3
  • WordPress 6.2.4
  • WordPress 6.2.5
  • WordPress 6.2.6
  • WordPress 6.2.7
  • WordPress 6.2.8
  • WordPress 6.2.9
  • WordPress 6.3
  • WordPress 6.3.1
  • WordPress 6.3.10
  • WordPress 6.3.11
  • WordPress 6.3.12
  • WordPress 6.3.13
  • WordPress 6.3.2
  • WordPress 6.3.3
  • WordPress 6.3.4
  • WordPress 6.3.5
  • WordPress 6.3.6
  • WordPress 6.3.7
  • WordPress 6.3.8
  • WordPress 6.3.9
  • WordPress 6.4
  • WordPress 6.4.1
  • WordPress 6.4.10
  • WordPress 6.4.11
  • WordPress 6.4.12
  • WordPress 6.4.13
  • WordPress 6.4.2
  • WordPress 6.4.3
  • WordPress 6.4.4
  • WordPress 6.4.5
  • WordPress 6.4.6
  • WordPress 6.4.7
  • WordPress 6.4.8
  • WordPress 6.4.9
  • WordPress 6.5
  • WordPress 6.5.10
  • WordPress 6.5.11
  • WordPress 6.5.12
  • WordPress 6.5.13
  • WordPress 6.5.2
  • WordPress 6.5.3
  • WordPress 6.5.4
  • WordPress 6.5.5
  • WordPress 6.5.6
  • WordPress 6.5.7
  • WordPress 6.5.8
  • WordPress 6.5.9
  • WordPress 6.6
  • WordPress 6.6.1
  • WordPress 6.6.10
  • WordPress 6.6.2
  • WordPress 6.6.3
  • WordPress 6.6.4
  • WordPress 6.6.5
  • WordPress 6.6.6
  • WordPress 6.6.7
  • WordPress 6.6.8
  • WordPress 6.6.9
  • WordPress 6.7
  • WordPress 6.7.1
  • WordPress 6.7.10
  • WordPress 6.7.2
  • WordPress 6.7.3
  • WordPress 6.7.4
  • WordPress 6.7.5
  • WordPress 6.7.6
  • WordPress 6.7.7
  • WordPress 6.7.8
  • WordPress 6.7.9
  • WordPress 6.8
  • WordPress 6.8.1
  • WordPress 6.8.10
  • WordPress 6.8.11
  • WordPress 6.8.2
  • WordPress 6.8.3
  • WordPress 6.8.4
  • WordPress 6.8.5
  • WordPress 6.8.6
  • WordPress 6.8.7
  • WordPress 6.8.8
  • WordPress 6.8.9
  • WordPress 6.9
  • WordPress 6.9.1
  • WordPress 6.9.10
  • WordPress 6.9.2
  • WordPress 6.9.3
  • WordPress 6.9.4
  • WordPress 6.9.5
  • WordPress 6.9.6
  • WordPress 6.9.7
  • WordPress 6.9.8
  • WordPress 6.9.9
  • WordPress 7.0
  • WordPress 7.0.1
  • WordPress 7.0.2
  • WordPress 7.0.3
  • WordPress 7.0.4
  • WordPress 7.0.5
  • WordPress 7.0.6
  • WordPress 7.0.7
  • WordPress 7.1
  • WordPress 7.1.1
  • WordPress 7.1.2
  • WordPress 7.1.3

Stored Cross-Site Scripting in WordPress Comments Pagination and Post Navigation Link block labels

Skrevet den af i WordPress

A user with Contributor access or higher can put HTML into the label of a Comments Pagination Next/Previous or Post Navigation Link block. The blocks’ server-side render callbacks printed the label without escaping, so the markup ends up in the page served to every visitor. Fixed upstream in WordPress 7.1.4 and the matching security releases of the 5.9-7.0 branches.

This vulnerability affects the following application versions:

  • WordPress 5.9
  • WordPress 5.9.1
  • WordPress 5.9.2
  • WordPress 5.9.3
  • WordPress 5.9.4
  • WordPress 5.9.5
  • WordPress 5.9.6
  • WordPress 5.9.7
  • WordPress 5.9.8
  • WordPress 5.9.9
  • WordPress 5.9.10
  • WordPress 5.9.11
  • WordPress 5.9.12
  • WordPress 5.9.13
  • WordPress 5.9.14
  • WordPress 5.9.15
  • WordPress 5.9.16
  • WordPress 5.9.17
  • WordPress 5.9.18
  • WordPress 5.9.19
  • WordPress 6.0
  • WordPress 6.0.1
  • WordPress 6.0.2
  • WordPress 6.0.3
  • WordPress 6.0.4
  • WordPress 6.0.5
  • WordPress 6.0.6
  • WordPress 6.0.7
  • WordPress 6.0.8
  • WordPress 6.0.9
  • WordPress 6.0.10
  • WordPress 6.0.11
  • WordPress 6.0.12
  • WordPress 6.0.13
  • WordPress 6.0.14
  • WordPress 6.0.15
  • WordPress 6.0.16
  • WordPress 6.0.17
  • WordPress 6.1
  • WordPress 6.1.1
  • WordPress 6.1.2
  • WordPress 6.1.3
  • WordPress 6.1.4
  • WordPress 6.1.5
  • WordPress 6.1.6
  • WordPress 6.1.7
  • WordPress 6.1.8
  • WordPress 6.1.9
  • WordPress 6.1.10
  • WordPress 6.1.11
  • WordPress 6.1.12
  • WordPress 6.1.13
  • WordPress 6.1.14
  • WordPress 6.1.15
  • WordPress 6.2
  • WordPress 6.2.1
  • WordPress 6.2.2
  • WordPress 6.2.3
  • WordPress 6.2.4
  • WordPress 6.2.5
  • WordPress 6.2.6
  • WordPress 6.2.7
  • WordPress 6.2.8
  • WordPress 6.2.9
  • WordPress 6.2.10
  • WordPress 6.2.11
  • WordPress 6.2.12
  • WordPress 6.2.13
  • WordPress 6.2.14
  • WordPress 6.3
  • WordPress 6.3.1
  • WordPress 6.3.2
  • WordPress 6.3.3
  • WordPress 6.3.4
  • WordPress 6.3.5
  • WordPress 6.3.6
  • WordPress 6.3.7
  • WordPress 6.3.8
  • WordPress 6.3.9
  • WordPress 6.3.10
  • WordPress 6.3.11
  • WordPress 6.3.12
  • WordPress 6.3.13
  • WordPress 6.4
  • WordPress 6.4.1
  • WordPress 6.4.2
  • WordPress 6.4.3
  • WordPress 6.4.4
  • WordPress 6.4.5
  • WordPress 6.4.6
  • WordPress 6.4.7
  • WordPress 6.4.8
  • WordPress 6.4.9
  • WordPress 6.4.10
  • WordPress 6.4.11
  • WordPress 6.4.12
  • WordPress 6.4.13
  • WordPress 6.5
  • WordPress 6.5.2
  • WordPress 6.5.3
  • WordPress 6.5.4
  • WordPress 6.5.5
  • WordPress 6.5.6
  • WordPress 6.5.7
  • WordPress 6.5.8
  • WordPress 6.5.9
  • WordPress 6.5.10
  • WordPress 6.5.11
  • WordPress 6.5.12
  • WordPress 6.5.13
  • WordPress 6.6
  • WordPress 6.6.1
  • WordPress 6.6.2
  • WordPress 6.6.3
  • WordPress 6.6.4
  • WordPress 6.6.5
  • WordPress 6.6.6
  • WordPress 6.6.7
  • WordPress 6.6.8
  • WordPress 6.6.9
  • WordPress 6.6.10
  • WordPress 6.7
  • WordPress 6.7.1
  • WordPress 6.7.2
  • WordPress 6.7.3
  • WordPress 6.7.4
  • WordPress 6.7.5
  • WordPress 6.7.6
  • WordPress 6.7.7
  • WordPress 6.7.8
  • WordPress 6.7.9
  • WordPress 6.7.10
  • WordPress 6.8
  • WordPress 6.8.1
  • WordPress 6.8.2
  • WordPress 6.8.3
  • WordPress 6.8.4
  • WordPress 6.8.5
  • WordPress 6.8.6
  • WordPress 6.8.7
  • WordPress 6.8.8
  • WordPress 6.8.9
  • WordPress 6.8.10
  • WordPress 6.8.11
  • WordPress 6.9
  • WordPress 6.9.1
  • WordPress 6.9.2
  • WordPress 6.9.3
  • WordPress 6.9.4
  • WordPress 6.9.5
  • WordPress 6.9.6
  • WordPress 6.9.7
  • WordPress 6.9.8
  • WordPress 6.9.9
  • WordPress 6.9.10
  • WordPress 7.0
  • WordPress 7.0.1
  • WordPress 7.0.2
  • WordPress 7.0.3
  • WordPress 7.0.4
  • WordPress 7.0.5
  • WordPress 7.0.6
  • WordPress 7.0.7
  • WordPress 7.1
  • WordPress 7.1.1
  • WordPress 7.1.2
  • WordPress 7.1.3

Reflected Cross-Site Scripting in UpdraftPlus Restore Page

Skrevet den af i UpdraftPlus: WordPress Backup & Migration Plugin

The UpdraftPlus restore page echoed the attacker-supplied updraft_restore parameter into the page without escaping. An unauthenticated attacker who lures an administrator into a crafted request can run script in their browser. Fixed in 1.16.69.

This vulnerability affects the following application versions:

  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.13
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.14
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.15
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.16
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.17
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.20
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.21
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.22
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.23
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.24
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.25
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.26
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.28
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.29
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.32
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.34
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.35
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.36
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.37
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.40
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.41
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.42
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.43
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.44
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.45
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.46
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.47
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.48
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.49
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.50
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.51
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.53
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.55
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.56
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.59
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.60
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.61
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.62
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.63
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.64
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.65
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.66
  • UpdraftPlus: WordPress Backup & Migration Plugin 1.16.67

Incorrect Permissions for Notes in WordPress REST Comments Endpoint

Skrevet den af i WordPress

The WordPress REST API comments endpoint let any user holding the moderate_comments capability update or delete a note (the block editor’s editorial comments, comment type ‘note’) without checking that they can edit the post the note belongs to. A user whose role can moderate comments but cannot edit a given post could therefore read, change and delete the private editorial notes attached to it. Fixed upstream in WordPress 7.1.4, 7.0.8 and 6.9.11.

This vulnerability affects the following application versions:

  • WordPress 6.9
  • WordPress 6.9.1
  • WordPress 6.9.2
  • WordPress 6.9.3
  • WordPress 6.9.4
  • WordPress 6.9.5
  • WordPress 6.9.6
  • WordPress 6.9.7
  • WordPress 6.9.8
  • WordPress 6.9.9
  • WordPress 6.9.10
  • WordPress 7.0
  • WordPress 7.0.1
  • WordPress 7.0.2
  • WordPress 7.0.3
  • WordPress 7.0.4
  • WordPress 7.0.5
  • WordPress 7.0.6
  • WordPress 7.0.7
  • WordPress 7.1
  • WordPress 7.1.1
  • WordPress 7.1.2
  • WordPress 7.1.3

Remote Code Execution via Race Condition in the WordPress Upgrade Working Directory

Skrevet den af i WordPress

WordPress unpacked update packages into a predictably named, web-served directory under wp-content/upgrade/. While an update was running, an unauthenticated attacker could reach the unpacked files and get a wp-config.php written into that directory copied over the site’s configuration, which can lead to remote code execution. The fix gives the working directory an unpredictable name, keeps the upgrade directory from being listed, and never copies a wp-config.php during a core update.

This vulnerability affects the following application versions:

  • WordPress 3.6
  • WordPress 3.6.1
  • WordPress 3.7
  • WordPress 3.7.1
  • WordPress 3.7.2
  • WordPress 3.7.3
  • WordPress 3.7.4
  • WordPress 3.7.5
  • WordPress 3.7.6
  • WordPress 3.7.7
  • WordPress 3.7.8
  • WordPress 3.7.9
  • WordPress 3.7.10
  • WordPress 3.7.11
  • WordPress 3.7.12
  • WordPress 3.7.13
  • WordPress 3.7.14
  • WordPress 3.7.15
  • WordPress 3.7.16
  • WordPress 3.7.17
  • WordPress 3.7.18
  • WordPress 3.7.19
  • WordPress 3.7.20
  • WordPress 3.7.21
  • WordPress 3.7.22
  • WordPress 3.7.23
  • WordPress 3.7.24
  • WordPress 3.7.25
  • WordPress 3.7.26
  • WordPress 3.7.27
  • WordPress 3.7.28
  • WordPress 3.7.29
  • WordPress 3.7.30
  • WordPress 3.7.31
  • WordPress 3.7.32
  • WordPress 3.7.33
  • WordPress 3.7.34
  • WordPress 3.7.35
  • WordPress 3.7.36
  • WordPress 3.7.37
  • WordPress 3.7.38
  • WordPress 3.7.39
  • WordPress 3.7.40
  • WordPress 3.7.41
  • WordPress 3.8
  • WordPress 3.8.1
  • WordPress 3.8.2
  • WordPress 3.8.3
  • WordPress 3.8.4
  • WordPress 3.8.5
  • WordPress 3.8.6
  • WordPress 3.8.7
  • WordPress 3.8.8
  • WordPress 3.8.9
  • WordPress 3.8.10
  • WordPress 3.8.11
  • WordPress 3.8.12
  • WordPress 3.8.13
  • WordPress 3.8.14
  • WordPress 3.8.15
  • WordPress 3.8.16
  • WordPress 3.8.17
  • WordPress 3.8.18
  • WordPress 3.8.19
  • WordPress 3.8.20
  • WordPress 3.8.21
  • WordPress 3.8.22
  • WordPress 3.8.23
  • WordPress 3.8.24
  • WordPress 3.8.25
  • WordPress 3.8.26
  • WordPress 3.8.27
  • WordPress 3.8.28
  • WordPress 3.8.29
  • WordPress 3.8.30
  • WordPress 3.8.31
  • WordPress 3.8.32
  • WordPress 3.8.33
  • WordPress 3.8.34
  • WordPress 3.8.35
  • WordPress 3.8.36
  • WordPress 3.8.37
  • WordPress 3.8.38
  • WordPress 3.8.39
  • WordPress 3.8.40
  • WordPress 3.8.41
  • WordPress 3.9
  • WordPress 3.9.1
  • WordPress 3.9.2
  • WordPress 3.9.3
  • WordPress 3.9.4
  • WordPress 3.9.5
  • WordPress 3.9.6
  • WordPress 3.9.7
  • WordPress 3.9.8
  • WordPress 3.9.9
  • WordPress 3.9.10
  • WordPress 3.9.11
  • WordPress 3.9.12
  • WordPress 3.9.13
  • WordPress 3.9.14
  • WordPress 3.9.15
  • WordPress 3.9.16
  • WordPress 3.9.17
  • WordPress 3.9.18
  • WordPress 3.9.19
  • WordPress 3.9.20
  • WordPress 3.9.21
  • WordPress 3.9.22
  • WordPress 3.9.23
  • WordPress 3.9.24
  • WordPress 3.9.25
  • WordPress 3.9.26
  • WordPress 3.9.27
  • WordPress 3.9.28
  • WordPress 3.9.29
  • WordPress 3.9.30
  • WordPress 3.9.31
  • WordPress 3.9.32
  • WordPress 3.9.33
  • WordPress 3.9.34
  • WordPress 3.9.35
  • WordPress 3.9.36
  • WordPress 3.9.37
  • WordPress 3.9.39
  • WordPress 3.9.40
  • WordPress 4.0
  • WordPress 4.0.1
  • WordPress 4.0.2
  • WordPress 4.0.3
  • WordPress 4.0.4
  • WordPress 4.0.5
  • WordPress 4.0.6
  • WordPress 4.0.7
  • WordPress 4.0.8
  • WordPress 4.0.9
  • WordPress 4.0.10
  • WordPress 4.0.11
  • WordPress 4.0.12
  • WordPress 4.0.13
  • WordPress 4.0.14
  • WordPress 4.0.15
  • WordPress 4.0.16
  • WordPress 4.0.17
  • WordPress 4.0.18
  • WordPress 4.0.19
  • WordPress 4.0.20
  • WordPress 4.0.21
  • WordPress 4.0.22
  • WordPress 4.0.23
  • WordPress 4.0.24
  • WordPress 4.0.25
  • WordPress 4.0.26
  • WordPress 4.0.27
  • WordPress 4.0.28
  • WordPress 4.0.29
  • WordPress 4.0.30
  • WordPress 4.0.31
  • WordPress 4.0.32
  • WordPress 4.0.33
  • WordPress 4.0.34
  • WordPress 4.0.35
  • WordPress 4.0.36
  • WordPress 4.0.37
  • WordPress 4.0.38
  • WordPress 4.1
  • WordPress 4.1.1
  • WordPress 4.1.2
  • WordPress 4.1.3
  • WordPress 4.1.4
  • WordPress 4.1.5
  • WordPress 4.1.6
  • WordPress 4.1.7
  • WordPress 4.1.8
  • WordPress 4.1.9
  • WordPress 4.1.10
  • WordPress 4.1.11
  • WordPress 4.1.12
  • WordPress 4.1.13
  • WordPress 4.1.14
  • WordPress 4.1.15
  • WordPress 4.1.16
  • WordPress 4.1.17
  • WordPress 4.1.18
  • WordPress 4.1.19
  • WordPress 4.1.20
  • WordPress 4.1.21
  • WordPress 4.1.22
  • WordPress 4.1.23
  • WordPress 4.1.24
  • WordPress 4.1.25
  • WordPress 4.1.26
  • WordPress 4.1.27
  • WordPress 4.1.28
  • WordPress 4.1.29
  • WordPress 4.1.30
  • WordPress 4.1.31
  • WordPress 4.1.32
  • WordPress 4.1.33
  • WordPress 4.1.34
  • WordPress 4.1.35
  • WordPress 4.1.36
  • WordPress 4.1.37
  • WordPress 4.1.38
  • WordPress 4.1.39
  • WordPress 4.1.40
  • WordPress 4.1.41
  • WordPress 4.1.42
  • WordPress 4.2
  • WordPress 4.2.1
  • WordPress 4.2.2
  • WordPress 4.2.3
  • WordPress 4.2.4
  • WordPress 4.2.5
  • WordPress 4.2.6
  • WordPress 4.2.7
  • WordPress 4.2.8
  • WordPress 4.2.9
  • WordPress 4.2.10
  • WordPress 4.2.11
  • WordPress 4.2.12
  • WordPress 4.2.13
  • WordPress 4.2.14
  • WordPress 4.2.15
  • WordPress 4.2.16
  • WordPress 4.2.17
  • WordPress 4.2.18
  • WordPress 4.2.19
  • WordPress 4.2.20
  • WordPress 4.2.21
  • WordPress 4.2.22
  • WordPress 4.2.23
  • WordPress 4.2.24
  • WordPress 4.2.25
  • WordPress 4.2.26
  • WordPress 4.2.27
  • WordPress 4.2.28
  • WordPress 4.2.29
  • WordPress 4.2.30
  • WordPress 4.2.31
  • WordPress 4.2.32
  • WordPress 4.2.33
  • WordPress 4.2.34
  • WordPress 4.2.35
  • WordPress 4.2.36
  • WordPress 4.2.37
  • WordPress 4.2.38
  • WordPress 4.2.39
  • WordPress 4.3
  • WordPress 4.3.1
  • WordPress 4.3.2
  • WordPress 4.3.3
  • WordPress 4.3.4
  • WordPress 4.3.5
  • WordPress 4.3.6
  • WordPress 4.3.7
  • WordPress 4.3.8
  • WordPress 4.3.9
  • WordPress 4.3.10
  • WordPress 4.3.11
  • WordPress 4.3.12
  • WordPress 4.3.13
  • WordPress 4.3.14
  • WordPress 4.3.15
  • WordPress 4.3.16
  • WordPress 4.3.17
  • WordPress 4.3.18
  • WordPress 4.3.19
  • WordPress 4.3.20
  • WordPress 4.3.21
  • WordPress 4.3.22
  • WordPress 4.3.23
  • WordPress 4.3.24
  • WordPress 4.3.25
  • WordPress 4.3.26
  • WordPress 4.3.27
  • WordPress 4.3.28
  • WordPress 4.3.29
  • WordPress 4.3.30
  • WordPress 4.3.31
  • WordPress 4.3.32
  • WordPress 4.3.33
  • WordPress 4.3.34
  • WordPress 4.3.35
  • WordPress 4.4
  • WordPress 4.4.1
  • WordPress 4.4.2
  • WordPress 4.4.3
  • WordPress 4.4.4
  • WordPress 4.4.5
  • WordPress 4.4.6
  • WordPress 4.4.7
  • WordPress 4.4.8
  • WordPress 4.4.9
  • WordPress 4.4.10
  • WordPress 4.4.11
  • WordPress 4.4.12
  • WordPress 4.4.13
  • WordPress 4.4.14
  • WordPress 4.4.15
  • WordPress 4.4.16
  • WordPress 4.4.17
  • WordPress 4.4.18
  • WordPress 4.4.19
  • WordPress 4.4.20
  • WordPress 4.4.21
  • WordPress 4.4.22
  • WordPress 4.4.23
  • WordPress 4.4.24
  • WordPress 4.4.25
  • WordPress 4.4.26
  • WordPress 4.4.27
  • WordPress 4.4.28
  • WordPress 4.4.29
  • WordPress 4.4.30
  • WordPress 4.4.31
  • WordPress 4.4.32
  • WordPress 4.4.33
  • WordPress 4.4.34
  • WordPress 4.5
  • WordPress 4.5.1
  • WordPress 4.5.2
  • WordPress 4.5.3
  • WordPress 4.5.4
  • WordPress 4.5.5
  • WordPress 4.5.6
  • WordPress 4.5.7
  • WordPress 4.5.8
  • WordPress 4.5.9
  • WordPress 4.5.10
  • WordPress 4.5.11
  • WordPress 4.5.12
  • WordPress 4.5.13
  • WordPress 4.5.14
  • WordPress 4.5.15
  • WordPress 4.5.16
  • WordPress 4.5.17
  • WordPress 4.5.18
  • WordPress 4.5.19
  • WordPress 4.5.20
  • WordPress 4.5.21
  • WordPress 4.5.22
  • WordPress 4.5.23
  • WordPress 4.5.24
  • WordPress 4.5.25
  • WordPress 4.5.26
  • WordPress 4.5.27
  • WordPress 4.5.28
  • WordPress 4.5.29
  • WordPress 4.5.30
  • WordPress 4.5.31
  • WordPress 4.5.32
  • WordPress 4.5.33
  • WordPress 4.6
  • WordPress 4.6.1
  • WordPress 4.6.2
  • WordPress 4.6.3
  • WordPress 4.6.4
  • WordPress 4.6.5
  • WordPress 4.6.6
  • WordPress 4.6.7
  • WordPress 4.6.8
  • WordPress 4.6.9
  • WordPress 4.6.10
  • WordPress 4.6.11
  • WordPress 4.6.12
  • WordPress 4.6.13
  • WordPress 4.6.14
  • WordPress 4.6.15
  • WordPress 4.6.16
  • WordPress 4.6.17
  • WordPress 4.6.18
  • WordPress 4.6.19
  • WordPress 4.6.20
  • WordPress 4.6.21
  • WordPress 4.6.22
  • WordPress 4.6.23
  • WordPress 4.6.24
  • WordPress 4.6.25
  • WordPress 4.6.26
  • WordPress 4.6.27
  • WordPress 4.6.28
  • WordPress 4.6.29
  • WordPress 4.6.30
  • WordPress 4.7
  • WordPress 4.7.1
  • WordPress 4.7.2
  • WordPress 4.7.3
  • WordPress 4.7.4
  • WordPress 4.7.5
  • WordPress 4.7.6
  • WordPress 4.7.7
  • WordPress 4.7.8
  • WordPress 4.7.9
  • WordPress 4.7.10
  • WordPress 4.7.11
  • WordPress 4.7.12
  • WordPress 4.7.13
  • WordPress 4.7.14
  • WordPress 4.7.15
  • WordPress 4.7.16
  • WordPress 4.7.17
  • WordPress 4.7.18
  • WordPress 4.7.19
  • WordPress 4.7.20
  • WordPress 4.7.21
  • WordPress 4.7.22
  • WordPress 4.7.23
  • WordPress 4.7.24
  • WordPress 4.7.25
  • WordPress 4.7.26
  • WordPress 4.7.27
  • WordPress 4.7.28
  • WordPress 4.7.29
  • WordPress 4.7.30
  • WordPress 4.7.31
  • WordPress 4.7.32
  • WordPress 4.7.33
  • WordPress 4.7.34
  • WordPress 4.7.35
  • WordPress 4.7.36
  • WordPress 4.7.37
  • WordPress 4.7.38
  • WordPress 4.8
  • WordPress 4.8.1
  • WordPress 4.8.2
  • WordPress 4.8.3
  • WordPress 4.8.10
  • WordPress 4.8.11
  • WordPress 4.8.12
  • WordPress 4.8.13
  • WordPress 4.8.14
  • WordPress 4.8.15
  • WordPress 4.8.16
  • WordPress 4.8.17
  • WordPress 4.8.18
  • WordPress 4.8.19
  • WordPress 4.8.20
  • WordPress 4.8.21
  • WordPress 4.8.22
  • WordPress 4.8.23
  • WordPress 4.8.24
  • WordPress 4.8.25
  • WordPress 4.8.26
  • WordPress 4.8.27
  • WordPress 4.8.28
  • WordPress 4.8.29
  • WordPress 4.8.30
  • WordPress 4.8.4
  • WordPress 4.8.5
  • WordPress 4.8.6
  • WordPress 4.8.7
  • WordPress 4.8.8
  • WordPress 4.8.9
  • WordPress 4.8.31
  • WordPress 4.8.32
  • WordPress 4.8.33
  • WordPress 4.9
  • WordPress 4.9.1
  • WordPress 4.9.2
  • WordPress 4.9.3
  • WordPress 4.9.4
  • WordPress 4.9.5
  • WordPress 4.9.6
  • WordPress 4.9.7
  • WordPress 4.9.8
  • WordPress 4.9.9
  • WordPress 4.9.10
  • WordPress 4.9.11
  • WordPress 4.9.12
  • WordPress 4.9.13
  • WordPress 4.9.14
  • WordPress 4.9.15
  • WordPress 4.9.16
  • WordPress 4.9.17
  • WordPress 4.9.18
  • WordPress 4.9.19
  • WordPress 4.9.20
  • WordPress 4.9.21
  • WordPress 4.9.22
  • WordPress 4.9.23
  • WordPress 4.9.24
  • WordPress 4.9.25
  • WordPress 4.9.26
  • WordPress 4.9.27
  • WordPress 4.9.28
  • WordPress 4.9.29
  • WordPress 4.9.30
  • WordPress 4.9.31
  • WordPress 4.9.32
  • WordPress 4.9.33
  • WordPress 4.9.34
  • WordPress 5.0
  • WordPress 5.0.1
  • WordPress 5.0.10
  • WordPress 5.0.11
  • WordPress 5.0.12
  • WordPress 5.0.13
  • WordPress 5.0.14
  • WordPress 5.0.15
  • WordPress 5.0.16
  • WordPress 5.0.17
  • WordPress 5.0.18
  • WordPress 5.0.19
  • WordPress 5.0.2
  • WordPress 5.0.3
  • WordPress 5.0.4
  • WordPress 5.0.6
  • WordPress 5.0.7
  • WordPress 5.0.8
  • WordPress 5.0.9
  • WordPress 5.0.20
  • WordPress 5.0.21
  • WordPress 5.0.22
  • WordPress 5.0.23
  • WordPress 5.0.24
  • WordPress 5.0.25
  • WordPress 5.0.26
  • WordPress 5.0.27
  • WordPress 5.0.28
  • WordPress 5.0.29
  • WordPress 5.0.30
  • WordPress 5.0 Beta 1
  • WordPress 5.0 Beta 2
  • WordPress 5.0 Beta 3
  • WordPress 5.0 Beta 4
  • WordPress 5.0 RC1
  • WordPress 5.0 RC2
  • WordPress 5.0 RC3
  • WordPress 5.1
  • WordPress 5.1.1
  • WordPress 5.1.10
  • WordPress 5.1.11
  • WordPress 5.1.12
  • WordPress 5.1.13
  • WordPress 5.1.14
  • WordPress 5.1.15
  • WordPress 5.1.16
  • WordPress 5.1.17
  • WordPress 5.1.18
  • WordPress 5.1.19
  • WordPress 5.1.2
  • WordPress 5.1.20
  • WordPress 5.1.21
  • WordPress 5.1.22
  • WordPress 5.1.23
  • WordPress 5.1.24
  • WordPress 5.1.25
  • WordPress 5.1.26
  • WordPress 5.1.27
  • WordPress 5.1.3
  • WordPress 5.1.4
  • WordPress 5.1.5
  • WordPress 5.1.6
  • WordPress 5.1.7
  • WordPress 5.1.8
  • WordPress 5.1.9
  • WordPress 5.2
  • WordPress 5.2.1
  • WordPress 5.2.10
  • WordPress 5.2.11
  • WordPress 5.2.12
  • WordPress 5.2.13
  • WordPress 5.2.14
  • WordPress 5.2.15
  • WordPress 5.2.16
  • WordPress 5.2.17
  • WordPress 5.2.18
  • WordPress 5.2.19
  • WordPress 5.2.2
  • WordPress 5.2.20
  • WordPress 5.2.21
  • WordPress 5.2.22
  • WordPress 5.2.23
  • WordPress 5.2.24
  • WordPress 5.2.25
  • WordPress 5.2.26
  • WordPress 5.2.27
  • WordPress 5.2.28
  • WordPress 5.2.29
  • WordPress 5.2.3
  • WordPress 5.2.4
  • WordPress 5.2.5
  • WordPress 5.2.6
  • WordPress 5.2.7
  • WordPress 5.2.8
  • WordPress 5.2.9
  • WordPress 5.2 Beta 1
  • WordPress 5.2 Beta 2
  • WordPress 5.3
  • WordPress 5.3.1
  • WordPress 5.3.10
  • WordPress 5.3.11
  • WordPress 5.3.12
  • WordPress 5.3.13
  • WordPress 5.3.14
  • WordPress 5.3.15
  • WordPress 5.3.16
  • WordPress 5.3.17
  • WordPress 5.3.18
  • WordPress 5.3.19
  • WordPress 5.3.2
  • WordPress 5.3.20
  • WordPress 5.3.21
  • WordPress 5.3.22
  • WordPress 5.3.23
  • WordPress 5.3.24
  • WordPress 5.3.25
  • WordPress 5.3.26
  • WordPress 5.3.3
  • WordPress 5.3.4
  • WordPress 5.3.5
  • WordPress 5.3.6
  • WordPress 5.3.7
  • WordPress 5.3.8
  • WordPress 5.3.9
  • WordPress 5.4
  • WordPress 5.4.1
  • WordPress 5.4.10
  • WordPress 5.4.11
  • WordPress 5.4.12
  • WordPress 5.4.13
  • WordPress 5.4.14
  • WordPress 5.4.15
  • WordPress 5.4.16
  • WordPress 5.4.17
  • WordPress 5.4.18
  • WordPress 5.4.19
  • WordPress 5.4.2
  • WordPress 5.4.20
  • WordPress 5.4.21
  • WordPress 5.4.22
  • WordPress 5.4.23
  • WordPress 5.4.24
  • WordPress 5.4.3
  • WordPress 5.4.4
  • WordPress 5.4.5
  • WordPress 5.4.6
  • WordPress 5.4.7
  • WordPress 5.4.8
  • WordPress 5.4.9
  • WordPress 5.5
  • WordPress 5.5.1
  • WordPress 5.5.10
  • WordPress 5.5.11
  • WordPress 5.5.12
  • WordPress 5.5.13
  • WordPress 5.5.14
  • WordPress 5.5.15
  • WordPress 5.5.16
  • WordPress 5.5.17
  • WordPress 5.5.18
  • WordPress 5.5.19
  • WordPress 5.5.2
  • WordPress 5.5.20
  • WordPress 5.5.21
  • WordPress 5.5.22
  • WordPress 5.5.23
  • WordPress 5.5.3
  • WordPress 5.5.4
  • WordPress 5.5.5
  • WordPress 5.5.6
  • WordPress 5.5.7
  • WordPress 5.5.8
  • WordPress 5.5.9
  • WordPress 5.6
  • WordPress 5.6.1
  • WordPress 5.6.10
  • WordPress 5.6.11
  • WordPress 5.6.12
  • WordPress 5.6.13
  • WordPress 5.6.14
  • WordPress 5.6.15
  • WordPress 5.6.16
  • WordPress 5.6.17
  • WordPress 5.6.18
  • WordPress 5.6.19
  • WordPress 5.6.2
  • WordPress 5.6.20
  • WordPress 5.6.21
  • WordPress 5.6.22
  • WordPress 5.6.3
  • WordPress 5.6.4
  • WordPress 5.6.5
  • WordPress 5.6.6
  • WordPress 5.6.7
  • WordPress 5.6.8
  • WordPress 5.6.9
  • WordPress 5.7
  • WordPress 5.7.1
  • WordPress 5.7.10
  • WordPress 5.7.11
  • WordPress 5.7.12
  • WordPress 5.7.13
  • WordPress 5.7.14
  • WordPress 5.7.15
  • WordPress 5.7.16
  • WordPress 5.7.17
  • WordPress 5.7.18
  • WordPress 5.7.19
  • WordPress 5.7.2
  • WordPress 5.7.20
  • WordPress 5.7.3
  • WordPress 5.7.4
  • WordPress 5.7.5
  • WordPress 5.7.6
  • WordPress 5.7.7
  • WordPress 5.7.8
  • WordPress 5.7.9
  • WordPress 5.8
  • WordPress 5.8.1
  • WordPress 5.8.10
  • WordPress 5.8.11
  • WordPress 5.8.12
  • WordPress 5.8.13
  • WordPress 5.8.14
  • WordPress 5.8.15
  • WordPress 5.8.16
  • WordPress 5.8.17
  • WordPress 5.8.18
  • WordPress 5.8.2
  • WordPress 5.8.3
  • WordPress 5.8.4
  • WordPress 5.8.5
  • WordPress 5.8.6
  • WordPress 5.8.7
  • WordPress 5.8.8
  • WordPress 5.8.9
  • WordPress 5.9
  • WordPress 5.9.1
  • WordPress 5.9.10
  • WordPress 5.9.11
  • WordPress 5.9.12
  • WordPress 5.9.13
  • WordPress 5.9.14
  • WordPress 5.9.15
  • WordPress 5.9.16
  • WordPress 5.9.17
  • WordPress 5.9.18
  • WordPress 5.9.19
  • WordPress 5.9.2
  • WordPress 5.9.3
  • WordPress 5.9.4
  • WordPress 5.9.5
  • WordPress 5.9.6
  • WordPress 5.9.7
  • WordPress 5.9.8
  • WordPress 5.9.9
  • WordPress 6.0
  • WordPress 6.0.1
  • WordPress 6.0.10
  • WordPress 6.0.11
  • WordPress 6.0.12
  • WordPress 6.0.13
  • WordPress 6.0.14
  • WordPress 6.0.15
  • WordPress 6.0.16
  • WordPress 6.0.17
  • WordPress 6.0.2
  • WordPress 6.0.3
  • WordPress 6.0.4
  • WordPress 6.0.5
  • WordPress 6.0.6
  • WordPress 6.0.7
  • WordPress 6.0.8
  • WordPress 6.0.9
  • WordPress 6.1
  • WordPress 6.1.1
  • WordPress 6.1.10
  • WordPress 6.1.11
  • WordPress 6.1.12
  • WordPress 6.1.13
  • WordPress 6.1.14
  • WordPress 6.1.15
  • WordPress 6.1.2
  • WordPress 6.1.3
  • WordPress 6.1.4
  • WordPress 6.1.5
  • WordPress 6.1.6
  • WordPress 6.1.7
  • WordPress 6.1.8
  • WordPress 6.1.9
  • WordPress 6.2
  • WordPress 6.2.1
  • WordPress 6.2.10
  • WordPress 6.2.11
  • WordPress 6.2.12
  • WordPress 6.2.13
  • WordPress 6.2.14
  • WordPress 6.2.2
  • WordPress 6.2.3
  • WordPress 6.2.4
  • WordPress 6.2.5
  • WordPress 6.2.6
  • WordPress 6.2.7
  • WordPress 6.2.8
  • WordPress 6.2.9
  • WordPress 6.3
  • WordPress 6.3.1
  • WordPress 6.3.10
  • WordPress 6.3.11
  • WordPress 6.3.12
  • WordPress 6.3.13
  • WordPress 6.3.2
  • WordPress 6.3.3
  • WordPress 6.3.4
  • WordPress 6.3.5
  • WordPress 6.3.6
  • WordPress 6.3.7
  • WordPress 6.3.8
  • WordPress 6.3.9
  • WordPress 6.4
  • WordPress 6.4.1
  • WordPress 6.4.10
  • WordPress 6.4.11
  • WordPress 6.4.12
  • WordPress 6.4.13
  • WordPress 6.4.2
  • WordPress 6.4.3
  • WordPress 6.4.4
  • WordPress 6.4.5
  • WordPress 6.4.6
  • WordPress 6.4.7
  • WordPress 6.4.8
  • WordPress 6.4.9
  • WordPress 6.5
  • WordPress 6.5.10
  • WordPress 6.5.11
  • WordPress 6.5.12
  • WordPress 6.5.13
  • WordPress 6.5.2
  • WordPress 6.5.3
  • WordPress 6.5.4
  • WordPress 6.5.5
  • WordPress 6.5.6
  • WordPress 6.5.7
  • WordPress 6.5.8
  • WordPress 6.5.9
  • WordPress 6.6
  • WordPress 6.6.1
  • WordPress 6.6.10
  • WordPress 6.6.2
  • WordPress 6.6.3
  • WordPress 6.6.4
  • WordPress 6.6.5
  • WordPress 6.6.6
  • WordPress 6.6.7
  • WordPress 6.6.8
  • WordPress 6.6.9
  • WordPress 6.7
  • WordPress 6.7.1
  • WordPress 6.7.10
  • WordPress 6.7.2
  • WordPress 6.7.3
  • WordPress 6.7.4
  • WordPress 6.7.5
  • WordPress 6.7.6
  • WordPress 6.7.7
  • WordPress 6.7.8
  • WordPress 6.7.9
  • WordPress 6.8
  • WordPress 6.8.1
  • WordPress 6.8.10
  • WordPress 6.8.11
  • WordPress 6.8.2
  • WordPress 6.8.3
  • WordPress 6.8.4
  • WordPress 6.8.5
  • WordPress 6.8.6
  • WordPress 6.8.7
  • WordPress 6.8.8
  • WordPress 6.8.9
  • WordPress 6.9
  • WordPress 6.9.1
  • WordPress 6.9.10
  • WordPress 6.9.2
  • WordPress 6.9.3
  • WordPress 6.9.4
  • WordPress 6.9.5
  • WordPress 6.9.6
  • WordPress 6.9.7
  • WordPress 6.9.8
  • WordPress 6.9.9
  • WordPress 7.0
  • WordPress 7.0.1
  • WordPress 7.0.2
  • WordPress 7.0.3
  • WordPress 7.0.4
  • WordPress 7.0.5
  • WordPress 7.0.6
  • WordPress 7.0.7
  • WordPress 7.1
  • WordPress 7.1.1
  • WordPress 7.1.2
  • WordPress 7.1.3

Unescaped User Login and Display Name Output in WordPress User Management Screens

Skrevet den af i WordPress

WordPress printed user_login and display_name values without HTML escaping on the Users and Network Users list tables, the delete and remove user confirmation screens, the user profile screen, the admin bar, the add-user AJAX response and the multisite signup confirmation. A user record whose login or display name carries markup (for example one written by a plugin or import that bypasses WordPress’s own input sanitisation) could inject HTML into an administrator’s screens. WordPress 7.1.4 fixes this as hardening on every branch back to 4.7.

This vulnerability affects the following application versions:

  • WordPress 3.5
  • WordPress 3.5.1
  • WordPress 3.5.2
  • WordPress 3.6
  • WordPress 3.6.1
  • WordPress 3.7
  • WordPress 3.7.1
  • WordPress 3.7.2
  • WordPress 3.7.3
  • WordPress 3.7.4
  • WordPress 3.7.5
  • WordPress 3.7.6
  • WordPress 3.7.7
  • WordPress 3.7.8
  • WordPress 3.7.9
  • WordPress 3.7.10
  • WordPress 3.7.11
  • WordPress 3.7.12
  • WordPress 3.7.13
  • WordPress 3.7.14
  • WordPress 3.7.15
  • WordPress 3.7.16
  • WordPress 3.7.17
  • WordPress 3.7.18
  • WordPress 3.7.19
  • WordPress 3.7.20
  • WordPress 3.7.21
  • WordPress 3.7.22
  • WordPress 3.7.23
  • WordPress 3.7.24
  • WordPress 3.7.25
  • WordPress 3.7.26
  • WordPress 3.7.27
  • WordPress 3.7.28
  • WordPress 3.7.29
  • WordPress 3.7.30
  • WordPress 3.7.31
  • WordPress 3.7.32
  • WordPress 3.7.33
  • WordPress 3.7.34
  • WordPress 3.7.35
  • WordPress 3.7.36
  • WordPress 3.7.37
  • WordPress 3.7.38
  • WordPress 3.7.39
  • WordPress 3.7.40
  • WordPress 3.7.41
  • WordPress 3.8
  • WordPress 3.8.1
  • WordPress 3.8.2
  • WordPress 3.8.3
  • WordPress 3.8.4
  • WordPress 3.8.5
  • WordPress 3.8.6
  • WordPress 3.8.7
  • WordPress 3.8.8
  • WordPress 3.8.9
  • WordPress 3.8.10
  • WordPress 3.8.11
  • WordPress 3.8.12
  • WordPress 3.8.13
  • WordPress 3.8.14
  • WordPress 3.8.15
  • WordPress 3.8.16
  • WordPress 3.8.17
  • WordPress 3.8.18
  • WordPress 3.8.19
  • WordPress 3.8.20
  • WordPress 3.8.21
  • WordPress 3.8.22
  • WordPress 3.8.23
  • WordPress 3.8.24
  • WordPress 3.8.25
  • WordPress 3.8.26
  • WordPress 3.8.27
  • WordPress 3.8.28
  • WordPress 3.8.29
  • WordPress 3.8.30
  • WordPress 3.8.31
  • WordPress 3.8.32
  • WordPress 3.8.33
  • WordPress 3.8.34
  • WordPress 3.8.35
  • WordPress 3.8.36
  • WordPress 3.8.37
  • WordPress 3.8.38
  • WordPress 3.8.39
  • WordPress 3.8.40
  • WordPress 3.8.41
  • WordPress 3.9
  • WordPress 3.9.1
  • WordPress 3.9.2
  • WordPress 3.9.3
  • WordPress 3.9.4
  • WordPress 3.9.5
  • WordPress 3.9.6
  • WordPress 3.9.7
  • WordPress 3.9.8
  • WordPress 3.9.9
  • WordPress 3.9.10
  • WordPress 3.9.11
  • WordPress 3.9.12
  • WordPress 3.9.13
  • WordPress 3.9.14
  • WordPress 3.9.15
  • WordPress 3.9.16
  • WordPress 3.9.17
  • WordPress 3.9.18
  • WordPress 3.9.19
  • WordPress 3.9.20
  • WordPress 3.9.21
  • WordPress 3.9.22
  • WordPress 3.9.23
  • WordPress 3.9.24
  • WordPress 3.9.25
  • WordPress 3.9.26
  • WordPress 3.9.27
  • WordPress 3.9.28
  • WordPress 3.9.29
  • WordPress 3.9.30
  • WordPress 3.9.31
  • WordPress 3.9.32
  • WordPress 3.9.33
  • WordPress 3.9.34
  • WordPress 3.9.35
  • WordPress 3.9.36
  • WordPress 3.9.37
  • WordPress 3.9.39
  • WordPress 3.9.40
  • WordPress 4.0
  • WordPress 4.0.1
  • WordPress 4.0.2
  • WordPress 4.0.3
  • WordPress 4.0.4
  • WordPress 4.0.5
  • WordPress 4.0.6
  • WordPress 4.0.7
  • WordPress 4.0.8
  • WordPress 4.0.9
  • WordPress 4.0.10
  • WordPress 4.0.11
  • WordPress 4.0.12
  • WordPress 4.0.13
  • WordPress 4.0.14
  • WordPress 4.0.15
  • WordPress 4.0.16
  • WordPress 4.0.17
  • WordPress 4.0.18
  • WordPress 4.0.19
  • WordPress 4.0.20
  • WordPress 4.0.21
  • WordPress 4.0.22
  • WordPress 4.0.23
  • WordPress 4.0.24
  • WordPress 4.0.25
  • WordPress 4.0.26
  • WordPress 4.0.27
  • WordPress 4.0.28
  • WordPress 4.0.29
  • WordPress 4.0.30
  • WordPress 4.0.31
  • WordPress 4.0.32
  • WordPress 4.0.33
  • WordPress 4.0.34
  • WordPress 4.0.35
  • WordPress 4.0.36
  • WordPress 4.0.37
  • WordPress 4.0.38
  • WordPress 4.1
  • WordPress 4.1.1
  • WordPress 4.1.2
  • WordPress 4.1.3
  • WordPress 4.1.4
  • WordPress 4.1.5
  • WordPress 4.1.6
  • WordPress 4.1.7
  • WordPress 4.1.8
  • WordPress 4.1.9
  • WordPress 4.1.10
  • WordPress 4.1.11
  • WordPress 4.1.12
  • WordPress 4.1.13
  • WordPress 4.1.14
  • WordPress 4.1.15
  • WordPress 4.1.16
  • WordPress 4.1.17
  • WordPress 4.1.18
  • WordPress 4.1.19
  • WordPress 4.1.20
  • WordPress 4.1.21
  • WordPress 4.1.22
  • WordPress 4.1.23
  • WordPress 4.1.24
  • WordPress 4.1.25
  • WordPress 4.1.26
  • WordPress 4.1.27
  • WordPress 4.1.28
  • WordPress 4.1.29
  • WordPress 4.1.30
  • WordPress 4.1.31
  • WordPress 4.1.32
  • WordPress 4.1.33
  • WordPress 4.1.34
  • WordPress 4.1.35
  • WordPress 4.1.36
  • WordPress 4.1.37
  • WordPress 4.1.38
  • WordPress 4.1.39
  • WordPress 4.1.40
  • WordPress 4.1.41
  • WordPress 4.1.42
  • WordPress 4.2
  • WordPress 4.2.1
  • WordPress 4.2.2
  • WordPress 4.2.3
  • WordPress 4.2.4
  • WordPress 4.2.5
  • WordPress 4.2.6
  • WordPress 4.2.7
  • WordPress 4.2.8
  • WordPress 4.2.9
  • WordPress 4.2.10
  • WordPress 4.2.11
  • WordPress 4.2.12
  • WordPress 4.2.13
  • WordPress 4.2.14
  • WordPress 4.2.15
  • WordPress 4.2.16
  • WordPress 4.2.17
  • WordPress 4.2.18
  • WordPress 4.2.19
  • WordPress 4.2.20
  • WordPress 4.2.21
  • WordPress 4.2.22
  • WordPress 4.2.23
  • WordPress 4.2.24
  • WordPress 4.2.25
  • WordPress 4.2.26
  • WordPress 4.2.27
  • WordPress 4.2.28
  • WordPress 4.2.29
  • WordPress 4.2.30
  • WordPress 4.2.31
  • WordPress 4.2.32
  • WordPress 4.2.33
  • WordPress 4.2.34
  • WordPress 4.2.35
  • WordPress 4.2.36
  • WordPress 4.2.37
  • WordPress 4.2.38
  • WordPress 4.2.39
  • WordPress 4.3
  • WordPress 4.3.1
  • WordPress 4.3.2
  • WordPress 4.3.3
  • WordPress 4.3.4
  • WordPress 4.3.5
  • WordPress 4.3.6
  • WordPress 4.3.7
  • WordPress 4.3.8
  • WordPress 4.3.9
  • WordPress 4.3.10
  • WordPress 4.3.11
  • WordPress 4.3.12
  • WordPress 4.3.13
  • WordPress 4.3.14
  • WordPress 4.3.15
  • WordPress 4.3.16
  • WordPress 4.3.17
  • WordPress 4.3.18
  • WordPress 4.3.19
  • WordPress 4.3.20
  • WordPress 4.3.21
  • WordPress 4.3.22
  • WordPress 4.3.23
  • WordPress 4.3.24
  • WordPress 4.3.25
  • WordPress 4.3.26
  • WordPress 4.3.27
  • WordPress 4.3.28
  • WordPress 4.3.29
  • WordPress 4.3.30
  • WordPress 4.3.31
  • WordPress 4.3.32
  • WordPress 4.3.33
  • WordPress 4.3.34
  • WordPress 4.3.35
  • WordPress 4.4
  • WordPress 4.4.1
  • WordPress 4.4.2
  • WordPress 4.4.3
  • WordPress 4.4.4
  • WordPress 4.4.5
  • WordPress 4.4.6
  • WordPress 4.4.7
  • WordPress 4.4.8
  • WordPress 4.4.9
  • WordPress 4.4.10
  • WordPress 4.4.11
  • WordPress 4.4.12
  • WordPress 4.4.13
  • WordPress 4.4.14
  • WordPress 4.4.15
  • WordPress 4.4.16
  • WordPress 4.4.17
  • WordPress 4.4.18
  • WordPress 4.4.19
  • WordPress 4.4.20
  • WordPress 4.4.21
  • WordPress 4.4.22
  • WordPress 4.4.23
  • WordPress 4.4.24
  • WordPress 4.4.25
  • WordPress 4.4.26
  • WordPress 4.4.27
  • WordPress 4.4.28
  • WordPress 4.4.29
  • WordPress 4.4.30
  • WordPress 4.4.31
  • WordPress 4.4.32
  • WordPress 4.4.33
  • WordPress 4.4.34
  • WordPress 4.5
  • WordPress 4.5.1
  • WordPress 4.5.2
  • WordPress 4.5.3
  • WordPress 4.5.4
  • WordPress 4.5.5
  • WordPress 4.5.6
  • WordPress 4.5.7
  • WordPress 4.5.8
  • WordPress 4.5.9
  • WordPress 4.5.10
  • WordPress 4.5.11
  • WordPress 4.5.12
  • WordPress 4.5.13
  • WordPress 4.5.14
  • WordPress 4.5.15
  • WordPress 4.5.16
  • WordPress 4.5.17
  • WordPress 4.5.18
  • WordPress 4.5.19
  • WordPress 4.5.20
  • WordPress 4.5.21
  • WordPress 4.5.22
  • WordPress 4.5.23
  • WordPress 4.5.24
  • WordPress 4.5.25
  • WordPress 4.5.26
  • WordPress 4.5.27
  • WordPress 4.5.28
  • WordPress 4.5.29
  • WordPress 4.5.30
  • WordPress 4.5.31
  • WordPress 4.5.32
  • WordPress 4.5.33
  • WordPress 4.6
  • WordPress 4.6.1
  • WordPress 4.6.2
  • WordPress 4.6.3
  • WordPress 4.6.4
  • WordPress 4.6.5
  • WordPress 4.6.6
  • WordPress 4.6.7
  • WordPress 4.6.8
  • WordPress 4.6.9
  • WordPress 4.6.10
  • WordPress 4.6.11
  • WordPress 4.6.12
  • WordPress 4.6.13
  • WordPress 4.6.14
  • WordPress 4.6.15
  • WordPress 4.6.16
  • WordPress 4.6.17
  • WordPress 4.6.18
  • WordPress 4.6.19
  • WordPress 4.6.20
  • WordPress 4.6.21
  • WordPress 4.6.22
  • WordPress 4.6.23
  • WordPress 4.6.24
  • WordPress 4.6.25
  • WordPress 4.6.26
  • WordPress 4.6.27
  • WordPress 4.6.28
  • WordPress 4.6.29
  • WordPress 4.6.30
  • WordPress 4.7
  • WordPress 4.7.1
  • WordPress 4.7.2
  • WordPress 4.7.3
  • WordPress 4.7.4
  • WordPress 4.7.5
  • WordPress 4.7.6
  • WordPress 4.7.7
  • WordPress 4.7.8
  • WordPress 4.7.9
  • WordPress 4.7.10
  • WordPress 4.7.11
  • WordPress 4.7.12
  • WordPress 4.7.13
  • WordPress 4.7.14
  • WordPress 4.7.15
  • WordPress 4.7.16
  • WordPress 4.7.17
  • WordPress 4.7.18
  • WordPress 4.7.19
  • WordPress 4.7.20
  • WordPress 4.7.21
  • WordPress 4.7.22
  • WordPress 4.7.23
  • WordPress 4.7.24
  • WordPress 4.7.25
  • WordPress 4.7.26
  • WordPress 4.7.27
  • WordPress 4.7.28
  • WordPress 4.7.29
  • WordPress 4.7.30
  • WordPress 4.7.31
  • WordPress 4.7.32
  • WordPress 4.7.33
  • WordPress 4.7.34
  • WordPress 4.7.35
  • WordPress 4.7.36
  • WordPress 4.7.37
  • WordPress 4.7.38
  • WordPress 4.8
  • WordPress 4.8.1
  • WordPress 4.8.2
  • WordPress 4.8.3
  • WordPress 4.8.4
  • WordPress 4.8.5
  • WordPress 4.8.10
  • WordPress 4.8.11
  • WordPress 4.8.12
  • WordPress 4.8.13
  • WordPress 4.8.14
  • WordPress 4.8.15
  • WordPress 4.8.16
  • WordPress 4.8.17
  • WordPress 4.8.18
  • WordPress 4.8.19
  • WordPress 4.8.20
  • WordPress 4.8.21
  • WordPress 4.8.22
  • WordPress 4.8.23
  • WordPress 4.8.24
  • WordPress 4.8.25
  • WordPress 4.8.26
  • WordPress 4.8.27
  • WordPress 4.8.28
  • WordPress 4.8.29
  • WordPress 4.8.30
  • WordPress 4.8.31
  • WordPress 4.8.32
  • WordPress 4.8.33
  • WordPress 4.8.6
  • WordPress 4.8.7
  • WordPress 4.8.8
  • WordPress 4.8.9
  • WordPress 4.9
  • WordPress 4.9.1
  • WordPress 4.9.2
  • WordPress 4.9.3
  • WordPress 4.9.4
  • WordPress 4.9.5
  • WordPress 4.9.6
  • WordPress 4.9.7
  • WordPress 4.9.8
  • WordPress 4.9.9
  • WordPress 4.9.10
  • WordPress 4.9.11
  • WordPress 4.9.12
  • WordPress 4.9.13
  • WordPress 4.9.14
  • WordPress 4.9.15
  • WordPress 4.9.16
  • WordPress 4.9.17
  • WordPress 4.9.18
  • WordPress 4.9.19
  • WordPress 4.9.20
  • WordPress 4.9.21
  • WordPress 4.9.22
  • WordPress 4.9.23
  • WordPress 4.9.24
  • WordPress 4.9.25
  • WordPress 4.9.26
  • WordPress 4.9.27
  • WordPress 4.9.28
  • WordPress 4.9.29
  • WordPress 4.9.30
  • WordPress 4.9.31
  • WordPress 4.9.32
  • WordPress 4.9.33
  • WordPress 4.9.34
  • WordPress 5.0
  • WordPress 5.0.1
  • WordPress 5.0.2
  • WordPress 5.0.10
  • WordPress 5.0.11
  • WordPress 5.0.12
  • WordPress 5.0.13
  • WordPress 5.0.14
  • WordPress 5.0.15
  • WordPress 5.0.16
  • WordPress 5.0.17
  • WordPress 5.0.18
  • WordPress 5.0.19
  • WordPress 5.0.20
  • WordPress 5.0.21
  • WordPress 5.0.22
  • WordPress 5.0.23
  • WordPress 5.0.24
  • WordPress 5.0.3
  • WordPress 5.0.4
  • WordPress 5.0.6
  • WordPress 5.0.7
  • WordPress 5.0.8
  • WordPress 5.0.9
  • WordPress 5.0.25
  • WordPress 5.0.26
  • WordPress 5.0.27
  • WordPress 5.0.28
  • WordPress 5.0.29
  • WordPress 5.0.30
  • WordPress 5.0 Beta 1
  • WordPress 5.0 Beta 2
  • WordPress 5.0 Beta 3
  • WordPress 5.0 Beta 4
  • WordPress 5.0 RC1
  • WordPress 5.0 RC2
  • WordPress 5.0 RC3
  • WordPress 5.1
  • WordPress 5.1.1
  • WordPress 5.1.10
  • WordPress 5.1.11
  • WordPress 5.1.12
  • WordPress 5.1.13
  • WordPress 5.1.14
  • WordPress 5.1.15
  • WordPress 5.1.16
  • WordPress 5.1.17
  • WordPress 5.1.18
  • WordPress 5.1.19
  • WordPress 5.1.2
  • WordPress 5.1.20
  • WordPress 5.1.21
  • WordPress 5.1.22
  • WordPress 5.1.23
  • WordPress 5.1.24
  • WordPress 5.1.25
  • WordPress 5.1.26
  • WordPress 5.1.27
  • WordPress 5.1.3
  • WordPress 5.1.4
  • WordPress 5.1.5
  • WordPress 5.1.6
  • WordPress 5.1.7
  • WordPress 5.1.8
  • WordPress 5.1.9
  • WordPress 5.2
  • WordPress 5.2.1
  • WordPress 5.2.10
  • WordPress 5.2.11
  • WordPress 5.2.12
  • WordPress 5.2.13
  • WordPress 5.2.14
  • WordPress 5.2.15
  • WordPress 5.2.16
  • WordPress 5.2.17
  • WordPress 5.2.18
  • WordPress 5.2.19
  • WordPress 5.2.2
  • WordPress 5.2.20
  • WordPress 5.2.21
  • WordPress 5.2.22
  • WordPress 5.2.23
  • WordPress 5.2.24
  • WordPress 5.2.25
  • WordPress 5.2.26
  • WordPress 5.2.27
  • WordPress 5.2.28
  • WordPress 5.2.29
  • WordPress 5.2.3
  • WordPress 5.2.4
  • WordPress 5.2.5
  • WordPress 5.2.6
  • WordPress 5.2.7
  • WordPress 5.2.8
  • WordPress 5.2.9
  • WordPress 5.2 Beta 1
  • WordPress 5.2 Beta 2
  • WordPress 5.3
  • WordPress 5.3.1
  • WordPress 5.3.10
  • WordPress 5.3.11
  • WordPress 5.3.12
  • WordPress 5.3.13
  • WordPress 5.3.14
  • WordPress 5.3.15
  • WordPress 5.3.16
  • WordPress 5.3.17
  • WordPress 5.3.18
  • WordPress 5.3.19
  • WordPress 5.3.2
  • WordPress 5.3.20
  • WordPress 5.3.21
  • WordPress 5.3.22
  • WordPress 5.3.23
  • WordPress 5.3.24
  • WordPress 5.3.25
  • WordPress 5.3.26
  • WordPress 5.3.3
  • WordPress 5.3.4
  • WordPress 5.3.5
  • WordPress 5.3.6
  • WordPress 5.3.7
  • WordPress 5.3.8
  • WordPress 5.3.9
  • WordPress 5.4
  • WordPress 5.4.1
  • WordPress 5.4.10
  • WordPress 5.4.11
  • WordPress 5.4.12
  • WordPress 5.4.13
  • WordPress 5.4.14
  • WordPress 5.4.15
  • WordPress 5.4.16
  • WordPress 5.4.17
  • WordPress 5.4.18
  • WordPress 5.4.19
  • WordPress 5.4.2
  • WordPress 5.4.20
  • WordPress 5.4.21
  • WordPress 5.4.22
  • WordPress 5.4.23
  • WordPress 5.4.24
  • WordPress 5.4.3
  • WordPress 5.4.4
  • WordPress 5.4.5
  • WordPress 5.4.6
  • WordPress 5.4.7
  • WordPress 5.4.8
  • WordPress 5.4.9
  • WordPress 5.5
  • WordPress 5.5.1
  • WordPress 5.5.10
  • WordPress 5.5.11
  • WordPress 5.5.12
  • WordPress 5.5.13
  • WordPress 5.5.14
  • WordPress 5.5.15
  • WordPress 5.5.16
  • WordPress 5.5.17
  • WordPress 5.5.18
  • WordPress 5.5.19
  • WordPress 5.5.2
  • WordPress 5.5.20
  • WordPress 5.5.21
  • WordPress 5.5.22
  • WordPress 5.5.23
  • WordPress 5.5.3
  • WordPress 5.5.4
  • WordPress 5.5.5
  • WordPress 5.5.6
  • WordPress 5.5.7
  • WordPress 5.5.8
  • WordPress 5.5.9
  • WordPress 5.6
  • WordPress 5.6.1
  • WordPress 5.6.10
  • WordPress 5.6.11
  • WordPress 5.6.12
  • WordPress 5.6.13
  • WordPress 5.6.14
  • WordPress 5.6.15
  • WordPress 5.6.16
  • WordPress 5.6.17
  • WordPress 5.6.18
  • WordPress 5.6.19
  • WordPress 5.6.2
  • WordPress 5.6.20
  • WordPress 5.6.21
  • WordPress 5.6.22
  • WordPress 5.6.3
  • WordPress 5.6.4
  • WordPress 5.6.5
  • WordPress 5.6.6
  • WordPress 5.6.7
  • WordPress 5.6.8
  • WordPress 5.6.9
  • WordPress 5.7
  • WordPress 5.7.1
  • WordPress 5.7.10
  • WordPress 5.7.11
  • WordPress 5.7.12
  • WordPress 5.7.13
  • WordPress 5.7.14
  • WordPress 5.7.15
  • WordPress 5.7.16
  • WordPress 5.7.17
  • WordPress 5.7.18
  • WordPress 5.7.19
  • WordPress 5.7.2
  • WordPress 5.7.20
  • WordPress 5.7.3
  • WordPress 5.7.4
  • WordPress 5.7.5
  • WordPress 5.7.6
  • WordPress 5.7.7
  • WordPress 5.7.8
  • WordPress 5.7.9
  • WordPress 5.8
  • WordPress 5.8.1
  • WordPress 5.8.10
  • WordPress 5.8.11
  • WordPress 5.8.12
  • WordPress 5.8.13
  • WordPress 5.8.14
  • WordPress 5.8.15
  • WordPress 5.8.16
  • WordPress 5.8.17
  • WordPress 5.8.18
  • WordPress 5.8.2
  • WordPress 5.8.3
  • WordPress 5.8.4
  • WordPress 5.8.5
  • WordPress 5.8.6
  • WordPress 5.8.7
  • WordPress 5.8.8
  • WordPress 5.8.9
  • WordPress 5.9
  • WordPress 5.9.1
  • WordPress 5.9.10
  • WordPress 5.9.11
  • WordPress 5.9.12
  • WordPress 5.9.13
  • WordPress 5.9.14
  • WordPress 5.9.15
  • WordPress 5.9.16
  • WordPress 5.9.17
  • WordPress 5.9.18
  • WordPress 5.9.19
  • WordPress 5.9.2
  • WordPress 5.9.3
  • WordPress 5.9.4
  • WordPress 5.9.5
  • WordPress 5.9.6
  • WordPress 5.9.7
  • WordPress 5.9.8
  • WordPress 5.9.9
  • WordPress 6.0
  • WordPress 6.0.1
  • WordPress 6.0.10
  • WordPress 6.0.11
  • WordPress 6.0.12
  • WordPress 6.0.13
  • WordPress 6.0.14
  • WordPress 6.0.15
  • WordPress 6.0.16
  • WordPress 6.0.17
  • WordPress 6.0.2
  • WordPress 6.0.3
  • WordPress 6.0.4
  • WordPress 6.0.5
  • WordPress 6.0.6
  • WordPress 6.0.7
  • WordPress 6.0.8
  • WordPress 6.0.9
  • WordPress 6.1
  • WordPress 6.1.1
  • WordPress 6.1.10
  • WordPress 6.1.11
  • WordPress 6.1.12
  • WordPress 6.1.13
  • WordPress 6.1.14
  • WordPress 6.1.15
  • WordPress 6.1.2
  • WordPress 6.1.3
  • WordPress 6.1.4
  • WordPress 6.1.5
  • WordPress 6.1.6
  • WordPress 6.1.7
  • WordPress 6.1.8
  • WordPress 6.1.9
  • WordPress 6.2
  • WordPress 6.2.1
  • WordPress 6.2.10
  • WordPress 6.2.11
  • WordPress 6.2.12
  • WordPress 6.2.13
  • WordPress 6.2.14
  • WordPress 6.2.2
  • WordPress 6.2.3
  • WordPress 6.2.4
  • WordPress 6.2.5
  • WordPress 6.2.6
  • WordPress 6.2.7
  • WordPress 6.2.8
  • WordPress 6.2.9
  • WordPress 6.3
  • WordPress 6.3.1
  • WordPress 6.3.10
  • WordPress 6.3.11
  • WordPress 6.3.12
  • WordPress 6.3.13
  • WordPress 6.3.2
  • WordPress 6.3.3
  • WordPress 6.3.4
  • WordPress 6.3.5
  • WordPress 6.3.6
  • WordPress 6.3.7
  • WordPress 6.3.8
  • WordPress 6.3.9
  • WordPress 6.4
  • WordPress 6.4.1
  • WordPress 6.4.10
  • WordPress 6.4.11
  • WordPress 6.4.12
  • WordPress 6.4.13
  • WordPress 6.4.2
  • WordPress 6.4.3
  • WordPress 6.4.4
  • WordPress 6.4.5
  • WordPress 6.4.6
  • WordPress 6.4.7
  • WordPress 6.4.8
  • WordPress 6.4.9
  • WordPress 6.5
  • WordPress 6.5.10
  • WordPress 6.5.11
  • WordPress 6.5.12
  • WordPress 6.5.13
  • WordPress 6.5.2
  • WordPress 6.5.3
  • WordPress 6.5.4
  • WordPress 6.5.5
  • WordPress 6.5.6
  • WordPress 6.5.7
  • WordPress 6.5.8
  • WordPress 6.5.9
  • WordPress 6.6
  • WordPress 6.6.1
  • WordPress 6.6.10
  • WordPress 6.6.2
  • WordPress 6.6.3
  • WordPress 6.6.4
  • WordPress 6.6.5
  • WordPress 6.6.6
  • WordPress 6.6.7
  • WordPress 6.6.8
  • WordPress 6.6.9
  • WordPress 6.7
  • WordPress 6.7.1
  • WordPress 6.7.10
  • WordPress 6.7.2
  • WordPress 6.7.3
  • WordPress 6.7.4
  • WordPress 6.7.5
  • WordPress 6.7.6
  • WordPress 6.7.7
  • WordPress 6.7.8
  • WordPress 6.7.9
  • WordPress 6.8
  • WordPress 6.8.1
  • WordPress 6.8.10
  • WordPress 6.8.11
  • WordPress 6.8.2
  • WordPress 6.8.3
  • WordPress 6.8.4
  • WordPress 6.8.5
  • WordPress 6.8.6
  • WordPress 6.8.7
  • WordPress 6.8.8
  • WordPress 6.8.9
  • WordPress 6.9
  • WordPress 6.9.1
  • WordPress 6.9.10
  • WordPress 6.9.2
  • WordPress 6.9.3
  • WordPress 6.9.4
  • WordPress 6.9.5
  • WordPress 6.9.6
  • WordPress 6.9.7
  • WordPress 6.9.8
  • WordPress 6.9.9
  • WordPress 7.0
  • WordPress 7.0.1
  • WordPress 7.0.2
  • WordPress 7.0.3
  • WordPress 7.0.4
  • WordPress 7.0.5
  • WordPress 7.0.6
  • WordPress 7.0.7
  • WordPress 7.1
  • WordPress 7.1.1
  • WordPress 7.1.2
  • WordPress 7.1.3

Stored Cross-Site Scripting in WordPress Personal Data Request Screens

Skrevet den af i WordPress

WordPress printed the requester e-mail address of personal data export and erasure requests without HTML escaping in the Tools > Export Personal Data and Erase Personal Data list tables (link text and the row checkbox label). A user with the Editor role or higher who can store a request with markup in the e-mail field can run script in an administrator’s session when the requests screen is opened.

This vulnerability affects the following application versions:

  • WordPress 4.9.6
  • WordPress 4.9.7
  • WordPress 4.9.8
  • WordPress 4.9.9
  • WordPress 4.9.10
  • WordPress 4.9.11
  • WordPress 4.9.12
  • WordPress 4.9.13
  • WordPress 4.9.14
  • WordPress 4.9.15
  • WordPress 4.9.16
  • WordPress 4.9.17
  • WordPress 4.9.18
  • WordPress 4.9.19
  • WordPress 4.9.20
  • WordPress 4.9.21
  • WordPress 4.9.22
  • WordPress 4.9.23
  • WordPress 4.9.24
  • WordPress 4.9.25
  • WordPress 4.9.26
  • WordPress 4.9.27
  • WordPress 4.9.28
  • WordPress 4.9.29
  • WordPress 4.9.30
  • WordPress 4.9.31
  • WordPress 4.9.32
  • WordPress 4.9.33
  • WordPress 4.9.34
  • WordPress 5.0
  • WordPress 5.0.1
  • WordPress 5.0.2
  • WordPress 5.0.3
  • WordPress 5.0.10
  • WordPress 5.0.11
  • WordPress 5.0.12
  • WordPress 5.0.13
  • WordPress 5.0.14
  • WordPress 5.0.15
  • WordPress 5.0.16
  • WordPress 5.0.17
  • WordPress 5.0.18
  • WordPress 5.0.19
  • WordPress 5.0.20
  • WordPress 5.0.21
  • WordPress 5.0.22
  • WordPress 5.0.23
  • WordPress 5.0.24
  • WordPress 5.0.25
  • WordPress 5.0.26
  • WordPress 5.0.27
  • WordPress 5.0.28
  • WordPress 5.0.29
  • WordPress 5.0.30
  • WordPress 5.0.4
  • WordPress 5.0.6
  • WordPress 5.0.7
  • WordPress 5.0.8
  • WordPress 5.0.9
  • WordPress 5.0 Beta 1
  • WordPress 5.0 Beta 2
  • WordPress 5.0 Beta 3
  • WordPress 5.0 Beta 4
  • WordPress 5.0 RC1
  • WordPress 5.0 RC2
  • WordPress 5.0 RC3
  • WordPress 5.1
  • WordPress 5.1.1
  • WordPress 5.1.10
  • WordPress 5.1.11
  • WordPress 5.1.12
  • WordPress 5.1.13
  • WordPress 5.1.14
  • WordPress 5.1.15
  • WordPress 5.1.16
  • WordPress 5.1.17
  • WordPress 5.1.18
  • WordPress 5.1.19
  • WordPress 5.1.2
  • WordPress 5.1.20
  • WordPress 5.1.21
  • WordPress 5.1.22
  • WordPress 5.1.23
  • WordPress 5.1.24
  • WordPress 5.1.25
  • WordPress 5.1.26
  • WordPress 5.1.27
  • WordPress 5.1.3
  • WordPress 5.1.4
  • WordPress 5.1.5
  • WordPress 5.1.6
  • WordPress 5.1.7
  • WordPress 5.1.8
  • WordPress 5.1.9
  • WordPress 5.2
  • WordPress 5.2.1
  • WordPress 5.2.10
  • WordPress 5.2.11
  • WordPress 5.2.12
  • WordPress 5.2.13
  • WordPress 5.2.14
  • WordPress 5.2.15
  • WordPress 5.2.16
  • WordPress 5.2.17
  • WordPress 5.2.18
  • WordPress 5.2.19
  • WordPress 5.2.2
  • WordPress 5.2.20
  • WordPress 5.2.21
  • WordPress 5.2.22
  • WordPress 5.2.23
  • WordPress 5.2.24
  • WordPress 5.2.25
  • WordPress 5.2.26
  • WordPress 5.2.27
  • WordPress 5.2.28
  • WordPress 5.2.29
  • WordPress 5.2.3
  • WordPress 5.2.4
  • WordPress 5.2.5
  • WordPress 5.2.6
  • WordPress 5.2.7
  • WordPress 5.2.8
  • WordPress 5.2.9
  • WordPress 5.2 Beta 1
  • WordPress 5.2 Beta 2
  • WordPress 5.3
  • WordPress 5.3.1
  • WordPress 5.3.10
  • WordPress 5.3.11
  • WordPress 5.3.12
  • WordPress 5.3.13
  • WordPress 5.3.14
  • WordPress 5.3.15
  • WordPress 5.3.16
  • WordPress 5.3.17
  • WordPress 5.3.18
  • WordPress 5.3.19
  • WordPress 5.3.2
  • WordPress 5.3.20
  • WordPress 5.3.21
  • WordPress 5.3.22
  • WordPress 5.3.23
  • WordPress 5.3.24
  • WordPress 5.3.25
  • WordPress 5.3.26
  • WordPress 5.3.3
  • WordPress 5.3.4
  • WordPress 5.3.5
  • WordPress 5.3.6
  • WordPress 5.3.7
  • WordPress 5.3.8
  • WordPress 5.3.9
  • WordPress 5.4
  • WordPress 5.4.1
  • WordPress 5.4.10
  • WordPress 5.4.11
  • WordPress 5.4.12
  • WordPress 5.4.13
  • WordPress 5.4.14
  • WordPress 5.4.15
  • WordPress 5.4.16
  • WordPress 5.4.17
  • WordPress 5.4.18
  • WordPress 5.4.19
  • WordPress 5.4.2
  • WordPress 5.4.20
  • WordPress 5.4.21
  • WordPress 5.4.22
  • WordPress 5.4.23
  • WordPress 5.4.24
  • WordPress 5.4.3
  • WordPress 5.4.4
  • WordPress 5.4.5
  • WordPress 5.4.6
  • WordPress 5.4.7
  • WordPress 5.4.8
  • WordPress 5.4.9
  • WordPress 5.5
  • WordPress 5.5.1
  • WordPress 5.5.10
  • WordPress 5.5.11
  • WordPress 5.5.12
  • WordPress 5.5.13
  • WordPress 5.5.14
  • WordPress 5.5.15
  • WordPress 5.5.16
  • WordPress 5.5.17
  • WordPress 5.5.18
  • WordPress 5.5.19
  • WordPress 5.5.2
  • WordPress 5.5.20
  • WordPress 5.5.21
  • WordPress 5.5.22
  • WordPress 5.5.23
  • WordPress 5.5.3
  • WordPress 5.5.4
  • WordPress 5.5.5
  • WordPress 5.5.6
  • WordPress 5.5.7
  • WordPress 5.5.8
  • WordPress 5.5.9
  • WordPress 5.6
  • WordPress 5.6.1
  • WordPress 5.6.10
  • WordPress 5.6.11
  • WordPress 5.6.12
  • WordPress 5.6.13
  • WordPress 5.6.14
  • WordPress 5.6.15
  • WordPress 5.6.16
  • WordPress 5.6.17
  • WordPress 5.6.18
  • WordPress 5.6.19
  • WordPress 5.6.2
  • WordPress 5.6.20
  • WordPress 5.6.21
  • WordPress 5.6.22
  • WordPress 5.6.3
  • WordPress 5.6.4
  • WordPress 5.6.5
  • WordPress 5.6.6
  • WordPress 5.6.7
  • WordPress 5.6.8
  • WordPress 5.6.9
  • WordPress 5.7
  • WordPress 5.7.1
  • WordPress 5.7.10
  • WordPress 5.7.11
  • WordPress 5.7.12
  • WordPress 5.7.13
  • WordPress 5.7.14
  • WordPress 5.7.15
  • WordPress 5.7.16
  • WordPress 5.7.17
  • WordPress 5.7.18
  • WordPress 5.7.19
  • WordPress 5.7.2
  • WordPress 5.7.20
  • WordPress 5.7.3
  • WordPress 5.7.4
  • WordPress 5.7.5
  • WordPress 5.7.6
  • WordPress 5.7.7
  • WordPress 5.7.8
  • WordPress 5.7.9
  • WordPress 5.8
  • WordPress 5.8.1
  • WordPress 5.8.10
  • WordPress 5.8.11
  • WordPress 5.8.12
  • WordPress 5.8.13
  • WordPress 5.8.14
  • WordPress 5.8.15
  • WordPress 5.8.16
  • WordPress 5.8.17
  • WordPress 5.8.18
  • WordPress 5.8.2
  • WordPress 5.8.3
  • WordPress 5.8.4
  • WordPress 5.8.5
  • WordPress 5.8.6
  • WordPress 5.8.7
  • WordPress 5.8.8
  • WordPress 5.8.9
  • WordPress 5.9
  • WordPress 5.9.1
  • WordPress 5.9.10
  • WordPress 5.9.11
  • WordPress 5.9.12
  • WordPress 5.9.13
  • WordPress 5.9.14
  • WordPress 5.9.15
  • WordPress 5.9.16
  • WordPress 5.9.17
  • WordPress 5.9.18
  • WordPress 5.9.19
  • WordPress 5.9.2
  • WordPress 5.9.3
  • WordPress 5.9.4
  • WordPress 5.9.5
  • WordPress 5.9.6
  • WordPress 5.9.7
  • WordPress 5.9.8
  • WordPress 5.9.9
  • WordPress 6.0
  • WordPress 6.0.1
  • WordPress 6.0.10
  • WordPress 6.0.11
  • WordPress 6.0.12
  • WordPress 6.0.13
  • WordPress 6.0.14
  • WordPress 6.0.15
  • WordPress 6.0.16
  • WordPress 6.0.17
  • WordPress 6.0.2
  • WordPress 6.0.3
  • WordPress 6.0.4
  • WordPress 6.0.5
  • WordPress 6.0.6
  • WordPress 6.0.7
  • WordPress 6.0.8
  • WordPress 6.0.9
  • WordPress 6.1
  • WordPress 6.1.1
  • WordPress 6.1.10
  • WordPress 6.1.11
  • WordPress 6.1.12
  • WordPress 6.1.13
  • WordPress 6.1.14
  • WordPress 6.1.15
  • WordPress 6.1.2
  • WordPress 6.1.3
  • WordPress 6.1.4
  • WordPress 6.1.5
  • WordPress 6.1.6
  • WordPress 6.1.7
  • WordPress 6.1.8
  • WordPress 6.1.9
  • WordPress 6.2
  • WordPress 6.2.1
  • WordPress 6.2.10
  • WordPress 6.2.11
  • WordPress 6.2.12
  • WordPress 6.2.13
  • WordPress 6.2.14
  • WordPress 6.2.2
  • WordPress 6.2.3
  • WordPress 6.2.4
  • WordPress 6.2.5
  • WordPress 6.2.6
  • WordPress 6.2.7
  • WordPress 6.2.8
  • WordPress 6.2.9
  • WordPress 6.3
  • WordPress 6.3.1
  • WordPress 6.3.10
  • WordPress 6.3.11
  • WordPress 6.3.12
  • WordPress 6.3.13
  • WordPress 6.3.2
  • WordPress 6.3.3
  • WordPress 6.3.4
  • WordPress 6.3.5
  • WordPress 6.3.6
  • WordPress 6.3.7
  • WordPress 6.3.8
  • WordPress 6.3.9
  • WordPress 6.4
  • WordPress 6.4.1
  • WordPress 6.4.10
  • WordPress 6.4.11
  • WordPress 6.4.12
  • WordPress 6.4.13
  • WordPress 6.4.2
  • WordPress 6.4.3
  • WordPress 6.4.4
  • WordPress 6.4.5
  • WordPress 6.4.6
  • WordPress 6.4.7
  • WordPress 6.4.8
  • WordPress 6.4.9
  • WordPress 6.5
  • WordPress 6.5.10
  • WordPress 6.5.11
  • WordPress 6.5.12
  • WordPress 6.5.13
  • WordPress 6.5.2
  • WordPress 6.5.3
  • WordPress 6.5.4
  • WordPress 6.5.5
  • WordPress 6.5.6
  • WordPress 6.5.7
  • WordPress 6.5.8
  • WordPress 6.5.9
  • WordPress 6.6
  • WordPress 6.6.1
  • WordPress 6.6.10
  • WordPress 6.6.2
  • WordPress 6.6.3
  • WordPress 6.6.4
  • WordPress 6.6.5
  • WordPress 6.6.6
  • WordPress 6.6.7
  • WordPress 6.6.8
  • WordPress 6.6.9
  • WordPress 6.7
  • WordPress 6.7.1
  • WordPress 6.7.10
  • WordPress 6.7.2
  • WordPress 6.7.3
  • WordPress 6.7.4
  • WordPress 6.7.5
  • WordPress 6.7.6
  • WordPress 6.7.7
  • WordPress 6.7.8
  • WordPress 6.7.9
  • WordPress 6.8
  • WordPress 6.8.1
  • WordPress 6.8.10
  • WordPress 6.8.11
  • WordPress 6.8.2
  • WordPress 6.8.3
  • WordPress 6.8.4
  • WordPress 6.8.5
  • WordPress 6.8.6
  • WordPress 6.8.7
  • WordPress 6.8.8
  • WordPress 6.8.9
  • WordPress 6.9
  • WordPress 6.9.1
  • WordPress 6.9.10
  • WordPress 6.9.2
  • WordPress 6.9.3
  • WordPress 6.9.4
  • WordPress 6.9.5
  • WordPress 6.9.6
  • WordPress 6.9.7
  • WordPress 6.9.8
  • WordPress 6.9.9
  • WordPress 7.0
  • WordPress 7.0.1
  • WordPress 7.0.2
  • WordPress 7.0.3
  • WordPress 7.0.4
  • WordPress 7.0.5
  • WordPress 7.0.6
  • WordPress 7.0.7
  • WordPress 7.1
  • WordPress 7.1.1
  • WordPress 7.1.2
  • WordPress 7.1.3

Authenticated (Contributor+) Stored Cross-Site Scripting via WordPress Categories Block Label

Skrevet den af i WordPress

WordPress 6.7 through 7.1.3 built the Categories block’s dropdown markup by concatenating the block’s label attribute into the sprintf() format string. A Contributor could store a Categories block whose label contains printf conversion specifiers (such as %1$s or %2$s), which KSES keeps as plain text; when the block is rendered, sprintf() expands them into the wrapper attributes or the dropdown markup, which contain quotes and tags, breaking out of an HTML attribute and injecting script into every page that shows the block. Version 7.1.4 (and 7.0.8, 6.9.11, 6.8.12, 6.7.11) passes the label as a separate sprintf() argument instead.

This vulnerability affects the following application versions:

  • WordPress 6.7
  • WordPress 6.7.1
  • WordPress 6.7.2
  • WordPress 6.7.3
  • WordPress 6.7.4
  • WordPress 6.7.5
  • WordPress 6.7.6
  • WordPress 6.7.7
  • WordPress 6.7.8
  • WordPress 6.7.9
  • WordPress 6.7.10
  • WordPress 6.8
  • WordPress 6.8.1
  • WordPress 6.8.2
  • WordPress 6.8.3
  • WordPress 6.8.4
  • WordPress 6.8.5
  • WordPress 6.8.6
  • WordPress 6.8.7
  • WordPress 6.8.8
  • WordPress 6.8.9
  • WordPress 6.8.10
  • WordPress 6.8.11
  • WordPress 6.9
  • WordPress 6.9.1
  • WordPress 6.9.2
  • WordPress 6.9.3
  • WordPress 6.9.4
  • WordPress 6.9.5
  • WordPress 6.9.6
  • WordPress 6.9.7
  • WordPress 6.9.8
  • WordPress 6.9.9
  • WordPress 6.9.10
  • WordPress 7.0
  • WordPress 7.0.1
  • WordPress 7.0.2
  • WordPress 7.0.3
  • WordPress 7.0.4
  • WordPress 7.0.5
  • WordPress 7.0.6
  • WordPress 7.0.7
  • WordPress 7.1
  • WordPress 7.1.1
  • WordPress 7.1.2
  • WordPress 7.1.3

Authenticated (Contributor+) Stored Cross-Site Scripting via WordPress Block Delimiter Whitespace

Skrevet den af i WordPress

WordPress before 7.1.4 matched the whitespace inside block comment delimiters () with the regex class s, which accepts a different set of characters in the server-side PHP block parser (PCRE, which includes the vertical tab) than in the block editor JavaScript parser (which includes NBSP and other Unicode spaces). A Contributor could store a delimiter that the server treats as a plain HTML comment, so its block attributes skip the server-side KSES filtering, while the block editor parses it as a real block when an administrator opens the post, running script in the administrator session. Version 7.1.4 accepts only HTML whitespace (space, tab, form feed, carriage return, line feed) in block delimiters in both parsers.

This vulnerability affects the following application versions:

  • WordPress 5.0
  • WordPress 5.0.1
  • WordPress 5.0.2
  • WordPress 5.0.3
  • WordPress 5.0.4
  • WordPress 5.0.6
  • WordPress 5.0.7
  • WordPress 5.0.8
  • WordPress 5.0.9
  • WordPress 5.0.10
  • WordPress 5.0.11
  • WordPress 5.0.12
  • WordPress 5.0.13
  • WordPress 5.0.14
  • WordPress 5.0.15
  • WordPress 5.0.16
  • WordPress 5.0.17
  • WordPress 5.0.18
  • WordPress 5.0.19
  • WordPress 5.0.20
  • WordPress 5.0.21
  • WordPress 5.0.22
  • WordPress 5.0.23
  • WordPress 5.0.24
  • WordPress 5.0.25
  • WordPress 5.0.26
  • WordPress 5.0.27
  • WordPress 5.0.28
  • WordPress 5.0.29
  • WordPress 5.0.30
  • WordPress 5.0 Beta 1
  • WordPress 5.0 Beta 2
  • WordPress 5.0 Beta 3
  • WordPress 5.0 Beta 4
  • WordPress 5.0 RC1
  • WordPress 5.0 RC2
  • WordPress 5.0 RC3
  • WordPress 5.1
  • WordPress 5.1.1
  • WordPress 5.1.10
  • WordPress 5.1.11
  • WordPress 5.1.12
  • WordPress 5.1.13
  • WordPress 5.1.14
  • WordPress 5.1.15
  • WordPress 5.1.16
  • WordPress 5.1.17
  • WordPress 5.1.18
  • WordPress 5.1.19
  • WordPress 5.1.2
  • WordPress 5.1.20
  • WordPress 5.1.21
  • WordPress 5.1.22
  • WordPress 5.1.23
  • WordPress 5.1.24
  • WordPress 5.1.25
  • WordPress 5.1.26
  • WordPress 5.1.27
  • WordPress 5.1.3
  • WordPress 5.1.4
  • WordPress 5.1.5
  • WordPress 5.1.6
  • WordPress 5.1.7
  • WordPress 5.1.8
  • WordPress 5.1.9
  • WordPress 5.2
  • WordPress 5.2.1
  • WordPress 5.2.10
  • WordPress 5.2.11
  • WordPress 5.2.12
  • WordPress 5.2.13
  • WordPress 5.2.14
  • WordPress 5.2.15
  • WordPress 5.2.16
  • WordPress 5.2.17
  • WordPress 5.2.18
  • WordPress 5.2.19
  • WordPress 5.2.2
  • WordPress 5.2.20
  • WordPress 5.2.21
  • WordPress 5.2.22
  • WordPress 5.2.23
  • WordPress 5.2.24
  • WordPress 5.2.25
  • WordPress 5.2.26
  • WordPress 5.2.27
  • WordPress 5.2.28
  • WordPress 5.2.29
  • WordPress 5.2.3
  • WordPress 5.2.4
  • WordPress 5.2.5
  • WordPress 5.2.6
  • WordPress 5.2.7
  • WordPress 5.2.8
  • WordPress 5.2.9
  • WordPress 5.2 Beta 1
  • WordPress 5.2 Beta 2
  • WordPress 5.3
  • WordPress 5.3.1
  • WordPress 5.3.10
  • WordPress 5.3.11
  • WordPress 5.3.12
  • WordPress 5.3.13
  • WordPress 5.3.14
  • WordPress 5.3.15
  • WordPress 5.3.16
  • WordPress 5.3.17
  • WordPress 5.3.18
  • WordPress 5.3.19
  • WordPress 5.3.2
  • WordPress 5.3.20
  • WordPress 5.3.21
  • WordPress 5.3.22
  • WordPress 5.3.23
  • WordPress 5.3.24
  • WordPress 5.3.25
  • WordPress 5.3.26
  • WordPress 5.3.3
  • WordPress 5.3.4
  • WordPress 5.3.5
  • WordPress 5.3.6
  • WordPress 5.3.7
  • WordPress 5.3.8
  • WordPress 5.3.9
  • WordPress 5.4
  • WordPress 5.4.1
  • WordPress 5.4.10
  • WordPress 5.4.11
  • WordPress 5.4.12
  • WordPress 5.4.13
  • WordPress 5.4.14
  • WordPress 5.4.15
  • WordPress 5.4.16
  • WordPress 5.4.17
  • WordPress 5.4.18
  • WordPress 5.4.19
  • WordPress 5.4.2
  • WordPress 5.4.20
  • WordPress 5.4.21
  • WordPress 5.4.22
  • WordPress 5.4.23
  • WordPress 5.4.24
  • WordPress 5.4.3
  • WordPress 5.4.4
  • WordPress 5.4.5
  • WordPress 5.4.6
  • WordPress 5.4.7
  • WordPress 5.4.8
  • WordPress 5.4.9
  • WordPress 5.5
  • WordPress 5.5.1
  • WordPress 5.5.10
  • WordPress 5.5.11
  • WordPress 5.5.12
  • WordPress 5.5.13
  • WordPress 5.5.14
  • WordPress 5.5.15
  • WordPress 5.5.16
  • WordPress 5.5.17
  • WordPress 5.5.18
  • WordPress 5.5.19
  • WordPress 5.5.2
  • WordPress 5.5.20
  • WordPress 5.5.21
  • WordPress 5.5.22
  • WordPress 5.5.23
  • WordPress 5.5.3
  • WordPress 5.5.4
  • WordPress 5.5.5
  • WordPress 5.5.6
  • WordPress 5.5.7
  • WordPress 5.5.8
  • WordPress 5.5.9
  • WordPress 5.6
  • WordPress 5.6.1
  • WordPress 5.6.10
  • WordPress 5.6.11
  • WordPress 5.6.12
  • WordPress 5.6.13
  • WordPress 5.6.14
  • WordPress 5.6.15
  • WordPress 5.6.16
  • WordPress 5.6.17
  • WordPress 5.6.18
  • WordPress 5.6.19
  • WordPress 5.6.2
  • WordPress 5.6.20
  • WordPress 5.6.21
  • WordPress 5.6.22
  • WordPress 5.6.3
  • WordPress 5.6.4
  • WordPress 5.6.5
  • WordPress 5.6.6
  • WordPress 5.6.7
  • WordPress 5.6.8
  • WordPress 5.6.9
  • WordPress 5.7
  • WordPress 5.7.1
  • WordPress 5.7.10
  • WordPress 5.7.11
  • WordPress 5.7.12
  • WordPress 5.7.13
  • WordPress 5.7.14
  • WordPress 5.7.15
  • WordPress 5.7.16
  • WordPress 5.7.17
  • WordPress 5.7.18
  • WordPress 5.7.19
  • WordPress 5.7.2
  • WordPress 5.7.20
  • WordPress 5.7.3
  • WordPress 5.7.4
  • WordPress 5.7.5
  • WordPress 5.7.6
  • WordPress 5.7.7
  • WordPress 5.7.8
  • WordPress 5.7.9
  • WordPress 5.8
  • WordPress 5.8.1
  • WordPress 5.8.10
  • WordPress 5.8.11
  • WordPress 5.8.12
  • WordPress 5.8.13
  • WordPress 5.8.14
  • WordPress 5.8.15
  • WordPress 5.8.16
  • WordPress 5.8.17
  • WordPress 5.8.18
  • WordPress 5.8.2
  • WordPress 5.8.3
  • WordPress 5.8.4
  • WordPress 5.8.5
  • WordPress 5.8.6
  • WordPress 5.8.7
  • WordPress 5.8.8
  • WordPress 5.8.9
  • WordPress 5.9
  • WordPress 5.9.1
  • WordPress 5.9.10
  • WordPress 5.9.11
  • WordPress 5.9.12
  • WordPress 5.9.13
  • WordPress 5.9.14
  • WordPress 5.9.15
  • WordPress 5.9.16
  • WordPress 5.9.17
  • WordPress 5.9.18
  • WordPress 5.9.19
  • WordPress 5.9.2
  • WordPress 5.9.3
  • WordPress 5.9.4
  • WordPress 5.9.5
  • WordPress 5.9.6
  • WordPress 5.9.7
  • WordPress 5.9.8
  • WordPress 5.9.9
  • WordPress 6.0
  • WordPress 6.0.1
  • WordPress 6.0.10
  • WordPress 6.0.11
  • WordPress 6.0.12
  • WordPress 6.0.13
  • WordPress 6.0.14
  • WordPress 6.0.15
  • WordPress 6.0.16
  • WordPress 6.0.17
  • WordPress 6.0.2
  • WordPress 6.0.3
  • WordPress 6.0.4
  • WordPress 6.0.5
  • WordPress 6.0.6
  • WordPress 6.0.7
  • WordPress 6.0.8
  • WordPress 6.0.9
  • WordPress 6.1
  • WordPress 6.1.1
  • WordPress 6.1.10
  • WordPress 6.1.11
  • WordPress 6.1.12
  • WordPress 6.1.13
  • WordPress 6.1.14
  • WordPress 6.1.15
  • WordPress 6.1.2
  • WordPress 6.1.3
  • WordPress 6.1.4
  • WordPress 6.1.5
  • WordPress 6.1.6
  • WordPress 6.1.7
  • WordPress 6.1.8
  • WordPress 6.1.9
  • WordPress 6.2
  • WordPress 6.2.1
  • WordPress 6.2.10
  • WordPress 6.2.11
  • WordPress 6.2.12
  • WordPress 6.2.13
  • WordPress 6.2.14
  • WordPress 6.2.2
  • WordPress 6.2.3
  • WordPress 6.2.4
  • WordPress 6.2.5
  • WordPress 6.2.6
  • WordPress 6.2.7
  • WordPress 6.2.8
  • WordPress 6.2.9
  • WordPress 6.3
  • WordPress 6.3.1
  • WordPress 6.3.10
  • WordPress 6.3.11
  • WordPress 6.3.12
  • WordPress 6.3.13
  • WordPress 6.3.2
  • WordPress 6.3.3
  • WordPress 6.3.4
  • WordPress 6.3.5
  • WordPress 6.3.6
  • WordPress 6.3.7
  • WordPress 6.3.8
  • WordPress 6.3.9
  • WordPress 6.4
  • WordPress 6.4.1
  • WordPress 6.4.10
  • WordPress 6.4.11
  • WordPress 6.4.12
  • WordPress 6.4.13
  • WordPress 6.4.2
  • WordPress 6.4.3
  • WordPress 6.4.4
  • WordPress 6.4.5
  • WordPress 6.4.6
  • WordPress 6.4.7
  • WordPress 6.4.8
  • WordPress 6.4.9
  • WordPress 6.5
  • WordPress 6.5.10
  • WordPress 6.5.11
  • WordPress 6.5.12
  • WordPress 6.5.13
  • WordPress 6.5.2
  • WordPress 6.5.3
  • WordPress 6.5.4
  • WordPress 6.5.5
  • WordPress 6.5.6
  • WordPress 6.5.7
  • WordPress 6.5.8
  • WordPress 6.5.9
  • WordPress 6.6
  • WordPress 6.6.1
  • WordPress 6.6.10
  • WordPress 6.6.2
  • WordPress 6.6.3
  • WordPress 6.6.4
  • WordPress 6.6.5
  • WordPress 6.6.6
  • WordPress 6.6.7
  • WordPress 6.6.8
  • WordPress 6.6.9
  • WordPress 6.7
  • WordPress 6.7.1
  • WordPress 6.7.10
  • WordPress 6.7.2
  • WordPress 6.7.3
  • WordPress 6.7.4
  • WordPress 6.7.5
  • WordPress 6.7.6
  • WordPress 6.7.7
  • WordPress 6.7.8
  • WordPress 6.7.9
  • WordPress 6.8
  • WordPress 6.8.1
  • WordPress 6.8.10
  • WordPress 6.8.11
  • WordPress 6.8.2
  • WordPress 6.8.3
  • WordPress 6.8.4
  • WordPress 6.8.5
  • WordPress 6.8.6
  • WordPress 6.8.7
  • WordPress 6.8.8
  • WordPress 6.8.9
  • WordPress 6.9
  • WordPress 6.9.1
  • WordPress 6.9.10
  • WordPress 6.9.2
  • WordPress 6.9.3
  • WordPress 6.9.4
  • WordPress 6.9.5
  • WordPress 6.9.6
  • WordPress 6.9.7
  • WordPress 6.9.8
  • WordPress 6.9.9
  • WordPress 7.0
  • WordPress 7.0.1
  • WordPress 7.0.2
  • WordPress 7.0.3
  • WordPress 7.0.4
  • WordPress 7.0.5
  • WordPress 7.0.6
  • WordPress 7.0.7
  • WordPress 7.1
  • WordPress 7.1.1
  • WordPress 7.1.2
  • WordPress 7.1.3

Stored Cross-Site Scripting in YITH WooCommerce Wishlist Move-to-Wishlist Popup

Skrevet den af i YITH WooCommerce Wishlist

A contributor-level user can store script in a wishlist row id, which the move-to-wishlist popup concatenated into an HTML input attribute. It then runs when another user opens the page. Fixed in 4.6.0.

This vulnerability affects the following application versions:

  • YITH WooCommerce Wishlist 3.0.0
  • YITH WooCommerce Wishlist 3.0.2
  • YITH WooCommerce Wishlist 3.0.3
  • YITH WooCommerce Wishlist 3.0.4
  • YITH WooCommerce Wishlist 3.0.5
  • YITH WooCommerce Wishlist 3.0.6
  • YITH WooCommerce Wishlist 3.0.7
  • YITH WooCommerce Wishlist 3.0.8
  • YITH WooCommerce Wishlist 3.0.9
  • YITH WooCommerce Wishlist 3.0.10
  • YITH WooCommerce Wishlist 3.0.11
  • YITH WooCommerce Wishlist 3.0.12
  • YITH WooCommerce Wishlist 3.0.13
  • YITH WooCommerce Wishlist 3.0.14
  • YITH WooCommerce Wishlist 3.0.15
  • YITH WooCommerce Wishlist 3.0.16
  • YITH WooCommerce Wishlist 3.0.17
  • YITH WooCommerce Wishlist 3.0.18
  • YITH WooCommerce Wishlist 3.0.19
  • YITH WooCommerce Wishlist 3.0.20
  • YITH WooCommerce Wishlist 3.0.21
  • YITH WooCommerce Wishlist 3.0.22
  • YITH WooCommerce Wishlist 3.0.23
  • YITH WooCommerce Wishlist 3.0.25
  • YITH WooCommerce Wishlist 3.1.0
  • YITH WooCommerce Wishlist 3.1.1
  • YITH WooCommerce Wishlist 3.2.0
  • YITH WooCommerce Wishlist 3.3.0
  • YITH WooCommerce Wishlist 3.4.0
  • YITH WooCommerce Wishlist 3.5.0
  • YITH WooCommerce Wishlist 3.6.0
  • YITH WooCommerce Wishlist 3.7.0
  • YITH WooCommerce Wishlist 3.8.0
  • YITH WooCommerce Wishlist 3.9.0
  • YITH WooCommerce Wishlist 3.10.0
  • YITH WooCommerce Wishlist 3.11.0
  • YITH WooCommerce Wishlist 3.12.0
  • YITH WooCommerce Wishlist 3.13.0
  • YITH WooCommerce Wishlist 3.14.0
  • YITH WooCommerce Wishlist 3.15.0
  • YITH WooCommerce Wishlist 3.16.0
  • YITH WooCommerce Wishlist 3.17.0
  • YITH WooCommerce Wishlist 3.18.0
  • YITH WooCommerce Wishlist 3.19.0
  • YITH WooCommerce Wishlist 3.20.0
  • YITH WooCommerce Wishlist 3.21.0
  • YITH WooCommerce Wishlist 3.22.0
  • YITH WooCommerce Wishlist 3.23.0
  • YITH WooCommerce Wishlist 3.24.0
  • YITH WooCommerce Wishlist 3.25.0
  • YITH WooCommerce Wishlist 3.26.0
  • YITH WooCommerce Wishlist 3.27.0
  • YITH WooCommerce Wishlist 3.28.0
  • YITH WooCommerce Wishlist 3.29.0
  • YITH WooCommerce Wishlist 3.30.0
  • YITH WooCommerce Wishlist 3.31.0
  • YITH WooCommerce Wishlist 3.32.0
  • YITH WooCommerce Wishlist 3.33.0
  • YITH WooCommerce Wishlist 3.34.0
  • YITH WooCommerce Wishlist 3.35.0
  • YITH WooCommerce Wishlist 3.36.0
  • YITH WooCommerce Wishlist 3.37.0
  • YITH WooCommerce Wishlist 3.38.0
  • YITH WooCommerce Wishlist 4.0.0
  • YITH WooCommerce Wishlist 4.0.1
  • YITH WooCommerce Wishlist 4.1.0
  • YITH WooCommerce Wishlist 4.2.0
  • YITH WooCommerce Wishlist 4.3.0
  • YITH WooCommerce Wishlist 4.4.0
  • YITH WooCommerce Wishlist 4.5.0

Authenticated (Contributor+) Stored Cross-Site Scripting via WordPress Customizer Selective Refresh

Skrevet den af i WordPress

WordPress before 7.1.4 resolved Customizer selective-refresh partial placements by concatenating the partial ID into a jQuery selector passed to $(), and built widget containers from before_widget/after_widget markup taken from the partial parameters. Because partials and their parameters can be declared with data-customize-partial-* attributes inside post content, a Contributor could craft content that breaks out of the selector or makes jQuery parse attacker markup as HTML when an administrator previews it in the Customizer, running script in the administrator session. Version 7.1.4 escapes the partial ID, resolves placements only as selectors via $( document ).find(), and takes widget container markup from the registered sidebar instead.

This vulnerability affects the following application versions:

  • WordPress 4.5
  • WordPress 4.5.1
  • WordPress 4.5.2
  • WordPress 4.5.3
  • WordPress 4.5.4
  • WordPress 4.5.5
  • WordPress 4.5.6
  • WordPress 4.5.7
  • WordPress 4.5.8
  • WordPress 4.5.9
  • WordPress 4.5.10
  • WordPress 4.5.11
  • WordPress 4.5.12
  • WordPress 4.5.13
  • WordPress 4.5.14
  • WordPress 4.5.15
  • WordPress 4.5.16
  • WordPress 4.5.17
  • WordPress 4.5.18
  • WordPress 4.5.19
  • WordPress 4.5.20
  • WordPress 4.5.21
  • WordPress 4.5.22
  • WordPress 4.5.23
  • WordPress 4.5.24
  • WordPress 4.5.25
  • WordPress 4.5.26
  • WordPress 4.5.27
  • WordPress 4.5.28
  • WordPress 4.5.29
  • WordPress 4.5.30
  • WordPress 4.5.31
  • WordPress 4.5.32
  • WordPress 4.5.33
  • WordPress 4.6
  • WordPress 4.6.1
  • WordPress 4.6.2
  • WordPress 4.6.3
  • WordPress 4.6.4
  • WordPress 4.6.5
  • WordPress 4.6.6
  • WordPress 4.6.7
  • WordPress 4.6.8
  • WordPress 4.6.9
  • WordPress 4.6.10
  • WordPress 4.6.11
  • WordPress 4.6.12
  • WordPress 4.6.13
  • WordPress 4.6.14
  • WordPress 4.6.15
  • WordPress 4.6.16
  • WordPress 4.6.17
  • WordPress 4.6.18
  • WordPress 4.6.19
  • WordPress 4.6.20
  • WordPress 4.6.21
  • WordPress 4.6.22
  • WordPress 4.6.23
  • WordPress 4.6.24
  • WordPress 4.6.25
  • WordPress 4.6.26
  • WordPress 4.6.27
  • WordPress 4.6.28
  • WordPress 4.6.29
  • WordPress 4.6.30
  • WordPress 4.7
  • WordPress 4.7.1
  • WordPress 4.7.2
  • WordPress 4.7.3
  • WordPress 4.7.4
  • WordPress 4.7.5
  • WordPress 4.7.6
  • WordPress 4.7.7
  • WordPress 4.7.8
  • WordPress 4.7.9
  • WordPress 4.7.10
  • WordPress 4.7.11
  • WordPress 4.7.12
  • WordPress 4.7.13
  • WordPress 4.7.14
  • WordPress 4.7.15
  • WordPress 4.7.16
  • WordPress 4.7.17
  • WordPress 4.7.18
  • WordPress 4.7.19
  • WordPress 4.7.20
  • WordPress 4.7.21
  • WordPress 4.7.22
  • WordPress 4.7.23
  • WordPress 4.7.24
  • WordPress 4.7.25
  • WordPress 4.7.26
  • WordPress 4.7.27
  • WordPress 4.7.28
  • WordPress 4.7.29
  • WordPress 4.7.30
  • WordPress 4.7.31
  • WordPress 4.7.32
  • WordPress 4.7.33
  • WordPress 4.7.34
  • WordPress 4.7.35
  • WordPress 4.7.36
  • WordPress 4.7.37
  • WordPress 4.7.38
  • WordPress 4.7.39
  • WordPress 4.8
  • WordPress 4.8.1
  • WordPress 4.8.2
  • WordPress 4.8.3
  • WordPress 4.8.4
  • WordPress 4.8.5
  • WordPress 4.8.6
  • WordPress 4.8.7
  • WordPress 4.8.8
  • WordPress 4.8.9
  • WordPress 4.8.10
  • WordPress 4.8.11
  • WordPress 4.8.12
  • WordPress 4.8.13
  • WordPress 4.8.14
  • WordPress 4.8.15
  • WordPress 4.8.16
  • WordPress 4.8.17
  • WordPress 4.8.18
  • WordPress 4.8.19
  • WordPress 4.8.20
  • WordPress 4.8.21
  • WordPress 4.8.22
  • WordPress 4.8.23
  • WordPress 4.8.24
  • WordPress 4.8.25
  • WordPress 4.8.26
  • WordPress 4.8.27
  • WordPress 4.8.28
  • WordPress 4.8.29
  • WordPress 4.8.30
  • WordPress 4.8.31
  • WordPress 4.8.32
  • WordPress 4.8.33
  • WordPress 4.8.34
  • WordPress 4.9
  • WordPress 4.9.1
  • WordPress 4.9.10
  • WordPress 4.9.11
  • WordPress 4.9.12
  • WordPress 4.9.13
  • WordPress 4.9.14
  • WordPress 4.9.15
  • WordPress 4.9.2
  • WordPress 4.9.3
  • WordPress 4.9.4
  • WordPress 4.9.5
  • WordPress 4.9.6
  • WordPress 4.9.7
  • WordPress 4.9.8
  • WordPress 4.9.9
  • WordPress 4.9.16
  • WordPress 4.9.17
  • WordPress 4.9.18
  • WordPress 4.9.19
  • WordPress 4.9.20
  • WordPress 4.9.21
  • WordPress 4.9.22
  • WordPress 4.9.23
  • WordPress 4.9.24
  • WordPress 4.9.25
  • WordPress 4.9.26
  • WordPress 4.9.27
  • WordPress 4.9.28
  • WordPress 4.9.29
  • WordPress 4.9.30
  • WordPress 4.9.31
  • WordPress 4.9.32
  • WordPress 4.9.33
  • WordPress 4.9.34
  • WordPress 4.9.35
  • WordPress 5.0
  • WordPress 5.0.1
  • WordPress 5.0.10
  • WordPress 5.0.11
  • WordPress 5.0.12
  • WordPress 5.0.13
  • WordPress 5.0.14
  • WordPress 5.0.15
  • WordPress 5.0.16
  • WordPress 5.0.2
  • WordPress 5.0.3
  • WordPress 5.0.4
  • WordPress 5.0.6
  • WordPress 5.0.7
  • WordPress 5.0.8
  • WordPress 5.0.9
  • WordPress 5.0.17
  • WordPress 5.0.18
  • WordPress 5.0.19
  • WordPress 5.0.20
  • WordPress 5.0.21
  • WordPress 5.0.22
  • WordPress 5.0.23
  • WordPress 5.0.24
  • WordPress 5.0.25
  • WordPress 5.0.26
  • WordPress 5.0.27
  • WordPress 5.0.28
  • WordPress 5.0.29
  • WordPress 5.0.30
  • WordPress 5.0 Beta 1
  • WordPress 5.0 Beta 2
  • WordPress 5.0 Beta 3
  • WordPress 5.0 Beta 4
  • WordPress 5.0 RC1
  • WordPress 5.0 RC2
  • WordPress 5.0 RC3
  • WordPress 5.1
  • WordPress 5.1.1
  • WordPress 5.1.10
  • WordPress 5.1.11
  • WordPress 5.1.12
  • WordPress 5.1.13
  • WordPress 5.1.14
  • WordPress 5.1.15
  • WordPress 5.1.16
  • WordPress 5.1.17
  • WordPress 5.1.18
  • WordPress 5.1.19
  • WordPress 5.1.2
  • WordPress 5.1.20
  • WordPress 5.1.21
  • WordPress 5.1.22
  • WordPress 5.1.23
  • WordPress 5.1.24
  • WordPress 5.1.25
  • WordPress 5.1.26
  • WordPress 5.1.27
  • WordPress 5.1.3
  • WordPress 5.1.4
  • WordPress 5.1.5
  • WordPress 5.1.6
  • WordPress 5.1.7
  • WordPress 5.1.8
  • WordPress 5.1.9
  • WordPress 5.2
  • WordPress 5.2.1
  • WordPress 5.2.10
  • WordPress 5.2.11
  • WordPress 5.2.12
  • WordPress 5.2.13
  • WordPress 5.2.14
  • WordPress 5.2.15
  • WordPress 5.2.16
  • WordPress 5.2.17
  • WordPress 5.2.18
  • WordPress 5.2.19
  • WordPress 5.2.2
  • WordPress 5.2.20
  • WordPress 5.2.21
  • WordPress 5.2.22
  • WordPress 5.2.23
  • WordPress 5.2.24
  • WordPress 5.2.25
  • WordPress 5.2.26
  • WordPress 5.2.27
  • WordPress 5.2.28
  • WordPress 5.2.29
  • WordPress 5.2.3
  • WordPress 5.2.4
  • WordPress 5.2.5
  • WordPress 5.2.6
  • WordPress 5.2.7
  • WordPress 5.2.8
  • WordPress 5.2.9
  • WordPress 5.2 Beta 1
  • WordPress 5.2 Beta 2
  • WordPress 5.3
  • WordPress 5.3.1
  • WordPress 5.3.10
  • WordPress 5.3.11
  • WordPress 5.3.12
  • WordPress 5.3.13
  • WordPress 5.3.14
  • WordPress 5.3.15
  • WordPress 5.3.16
  • WordPress 5.3.17
  • WordPress 5.3.18
  • WordPress 5.3.19
  • WordPress 5.3.2
  • WordPress 5.3.20
  • WordPress 5.3.21
  • WordPress 5.3.22
  • WordPress 5.3.23
  • WordPress 5.3.24
  • WordPress 5.3.25
  • WordPress 5.3.26
  • WordPress 5.3.3
  • WordPress 5.3.4
  • WordPress 5.3.5
  • WordPress 5.3.6
  • WordPress 5.3.7
  • WordPress 5.3.8
  • WordPress 5.3.9
  • WordPress 5.4
  • WordPress 5.4.1
  • WordPress 5.4.10
  • WordPress 5.4.11
  • WordPress 5.4.12
  • WordPress 5.4.13
  • WordPress 5.4.14
  • WordPress 5.4.15
  • WordPress 5.4.16
  • WordPress 5.4.17
  • WordPress 5.4.18
  • WordPress 5.4.19
  • WordPress 5.4.2
  • WordPress 5.4.20
  • WordPress 5.4.21
  • WordPress 5.4.22
  • WordPress 5.4.23
  • WordPress 5.4.24
  • WordPress 5.4.3
  • WordPress 5.4.4
  • WordPress 5.4.5
  • WordPress 5.4.6
  • WordPress 5.4.7
  • WordPress 5.4.8
  • WordPress 5.4.9
  • WordPress 5.5
  • WordPress 5.5.1
  • WordPress 5.5.10
  • WordPress 5.5.11
  • WordPress 5.5.12
  • WordPress 5.5.13
  • WordPress 5.5.14
  • WordPress 5.5.15
  • WordPress 5.5.16
  • WordPress 5.5.17
  • WordPress 5.5.18
  • WordPress 5.5.19
  • WordPress 5.5.2
  • WordPress 5.5.20
  • WordPress 5.5.21
  • WordPress 5.5.22
  • WordPress 5.5.23
  • WordPress 5.5.3
  • WordPress 5.5.4
  • WordPress 5.5.5
  • WordPress 5.5.6
  • WordPress 5.5.7
  • WordPress 5.5.8
  • WordPress 5.5.9
  • WordPress 5.6
  • WordPress 5.6.1
  • WordPress 5.6.10
  • WordPress 5.6.11
  • WordPress 5.6.12
  • WordPress 5.6.13
  • WordPress 5.6.14
  • WordPress 5.6.15
  • WordPress 5.6.16
  • WordPress 5.6.17
  • WordPress 5.6.18
  • WordPress 5.6.19
  • WordPress 5.6.2
  • WordPress 5.6.20
  • WordPress 5.6.21
  • WordPress 5.6.22
  • WordPress 5.6.3
  • WordPress 5.6.4
  • WordPress 5.6.5
  • WordPress 5.6.6
  • WordPress 5.6.7
  • WordPress 5.6.8
  • WordPress 5.6.9
  • WordPress 5.7
  • WordPress 5.7.1
  • WordPress 5.7.10
  • WordPress 5.7.11
  • WordPress 5.7.12
  • WordPress 5.7.13
  • WordPress 5.7.14
  • WordPress 5.7.15
  • WordPress 5.7.16
  • WordPress 5.7.17
  • WordPress 5.7.18
  • WordPress 5.7.19
  • WordPress 5.7.2
  • WordPress 5.7.20
  • WordPress 5.7.3
  • WordPress 5.7.4
  • WordPress 5.7.5
  • WordPress 5.7.6
  • WordPress 5.7.7
  • WordPress 5.7.8
  • WordPress 5.7.9
  • WordPress 5.8
  • WordPress 5.8.1
  • WordPress 5.8.10
  • WordPress 5.8.11
  • WordPress 5.8.12
  • WordPress 5.8.13
  • WordPress 5.8.14
  • WordPress 5.8.15
  • WordPress 5.8.16
  • WordPress 5.8.17
  • WordPress 5.8.18
  • WordPress 5.8.2
  • WordPress 5.8.3
  • WordPress 5.8.4
  • WordPress 5.8.5
  • WordPress 5.8.6
  • WordPress 5.8.7
  • WordPress 5.8.8
  • WordPress 5.8.9
  • WordPress 5.9
  • WordPress 5.9.1
  • WordPress 5.9.10
  • WordPress 5.9.11
  • WordPress 5.9.12
  • WordPress 5.9.13
  • WordPress 5.9.14
  • WordPress 5.9.15
  • WordPress 5.9.16
  • WordPress 5.9.17
  • WordPress 5.9.18
  • WordPress 5.9.19
  • WordPress 5.9.2
  • WordPress 5.9.3
  • WordPress 5.9.4
  • WordPress 5.9.5
  • WordPress 5.9.6
  • WordPress 5.9.7
  • WordPress 5.9.8
  • WordPress 5.9.9
  • WordPress 6.0
  • WordPress 6.0.1
  • WordPress 6.0.10
  • WordPress 6.0.11
  • WordPress 6.0.12
  • WordPress 6.0.13
  • WordPress 6.0.14
  • WordPress 6.0.15
  • WordPress 6.0.16
  • WordPress 6.0.17
  • WordPress 6.0.2
  • WordPress 6.0.3
  • WordPress 6.0.4
  • WordPress 6.0.5
  • WordPress 6.0.6
  • WordPress 6.0.7
  • WordPress 6.0.8
  • WordPress 6.0.9
  • WordPress 6.1
  • WordPress 6.1.1
  • WordPress 6.1.10
  • WordPress 6.1.11
  • WordPress 6.1.12
  • WordPress 6.1.13
  • WordPress 6.1.14
  • WordPress 6.1.15
  • WordPress 6.1.2
  • WordPress 6.1.3
  • WordPress 6.1.4
  • WordPress 6.1.5
  • WordPress 6.1.6
  • WordPress 6.1.7
  • WordPress 6.1.8
  • WordPress 6.1.9
  • WordPress 6.2
  • WordPress 6.2.1
  • WordPress 6.2.10
  • WordPress 6.2.11
  • WordPress 6.2.12
  • WordPress 6.2.13
  • WordPress 6.2.14
  • WordPress 6.2.2
  • WordPress 6.2.3
  • WordPress 6.2.4
  • WordPress 6.2.5
  • WordPress 6.2.6
  • WordPress 6.2.7
  • WordPress 6.2.8
  • WordPress 6.2.9
  • WordPress 6.3
  • WordPress 6.3.1
  • WordPress 6.3.10
  • WordPress 6.3.11
  • WordPress 6.3.12
  • WordPress 6.3.13
  • WordPress 6.3.2
  • WordPress 6.3.3
  • WordPress 6.3.4
  • WordPress 6.3.5
  • WordPress 6.3.6
  • WordPress 6.3.7
  • WordPress 6.3.8
  • WordPress 6.3.9
  • WordPress 6.4
  • WordPress 6.4.1
  • WordPress 6.4.10
  • WordPress 6.4.11
  • WordPress 6.4.12
  • WordPress 6.4.13
  • WordPress 6.4.2
  • WordPress 6.4.3
  • WordPress 6.4.4
  • WordPress 6.4.5
  • WordPress 6.4.6
  • WordPress 6.4.7
  • WordPress 6.4.8
  • WordPress 6.4.9
  • WordPress 6.5
  • WordPress 6.5.10
  • WordPress 6.5.11
  • WordPress 6.5.12
  • WordPress 6.5.13
  • WordPress 6.5.2
  • WordPress 6.5.3
  • WordPress 6.5.4
  • WordPress 6.5.5
  • WordPress 6.5.6
  • WordPress 6.5.7
  • WordPress 6.5.8
  • WordPress 6.5.9
  • WordPress 6.6
  • WordPress 6.6.1
  • WordPress 6.6.10
  • WordPress 6.6.2
  • WordPress 6.6.3
  • WordPress 6.6.4
  • WordPress 6.6.5
  • WordPress 6.6.6
  • WordPress 6.6.7
  • WordPress 6.6.8
  • WordPress 6.6.9
  • WordPress 6.7
  • WordPress 6.7.1
  • WordPress 6.7.10
  • WordPress 6.7.2
  • WordPress 6.7.3
  • WordPress 6.7.4
  • WordPress 6.7.5
  • WordPress 6.7.6
  • WordPress 6.7.7
  • WordPress 6.7.8
  • WordPress 6.7.9
  • WordPress 6.8
  • WordPress 6.8.1
  • WordPress 6.8.10
  • WordPress 6.8.11
  • WordPress 6.8.2
  • WordPress 6.8.3
  • WordPress 6.8.4
  • WordPress 6.8.5
  • WordPress 6.8.6
  • WordPress 6.8.7
  • WordPress 6.8.8
  • WordPress 6.8.9
  • WordPress 6.9
  • WordPress 6.9.1
  • WordPress 6.9.10
  • WordPress 6.9.2
  • WordPress 6.9.3
  • WordPress 6.9.4
  • WordPress 6.9.5
  • WordPress 6.9.6
  • WordPress 6.9.7
  • WordPress 6.9.8
  • WordPress 6.9.9
  • WordPress 7.0
  • WordPress 7.0.1
  • WordPress 7.0.2
  • WordPress 7.0.3
  • WordPress 7.0.4
  • WordPress 7.0.5
  • WordPress 7.0.6
  • WordPress 7.0.7
  • WordPress 7.1
  • WordPress 7.1.1
  • WordPress 7.1.2
  • WordPress 7.1.3

Stored Cross-Site Scripting in WordPress Interactivity Router via Uploaded Text Files

Skrevet den af i WordPress

A user with the Author role or higher could upload a .txt file containing HTML markup and point the Interactivity API client-side router at it, for example through a link with a navigate directive. The router fetched the file and injected its markup into the current page as if it were an HTML page, regardless of the text/plain content type. Fixed in WordPress 7.1.4, which only fetches same-origin URLs and only processes successful same-origin text/html responses.

This vulnerability affects the following application versions:

  • WordPress 6.5
  • WordPress 6.5.2
  • WordPress 6.5.3
  • WordPress 6.5.4
  • WordPress 6.5.5
  • WordPress 6.5.6
  • WordPress 6.5.7
  • WordPress 6.5.8
  • WordPress 6.5.9
  • WordPress 6.5.10
  • WordPress 6.5.11
  • WordPress 6.5.12
  • WordPress 6.5.13
  • WordPress 6.6
  • WordPress 6.6.1
  • WordPress 6.6.2
  • WordPress 6.6.3
  • WordPress 6.6.4
  • WordPress 6.6.5
  • WordPress 6.6.6
  • WordPress 6.6.7
  • WordPress 6.6.8
  • WordPress 6.6.9
  • WordPress 6.6.10
  • WordPress 6.7
  • WordPress 6.7.1
  • WordPress 6.7.2
  • WordPress 6.7.3
  • WordPress 6.7.4
  • WordPress 6.7.5
  • WordPress 6.7.6
  • WordPress 6.7.7
  • WordPress 6.7.8
  • WordPress 6.7.9
  • WordPress 6.7.10
  • WordPress 6.8
  • WordPress 6.8.1
  • WordPress 6.8.2
  • WordPress 6.8.3
  • WordPress 6.8.4
  • WordPress 6.8.5
  • WordPress 6.8.6
  • WordPress 6.8.7
  • WordPress 6.8.8
  • WordPress 6.8.9
  • WordPress 6.8.10
  • WordPress 6.8.11
  • WordPress 6.9
  • WordPress 6.9.1
  • WordPress 6.9.2
  • WordPress 6.9.3
  • WordPress 6.9.4
  • WordPress 6.9.5
  • WordPress 6.9.6
  • WordPress 6.9.7
  • WordPress 6.9.8
  • WordPress 6.9.9
  • WordPress 6.9.10
  • WordPress 7.0
  • WordPress 7.0.1
  • WordPress 7.0.2
  • WordPress 7.0.3
  • WordPress 7.0.4
  • WordPress 7.0.5
  • WordPress 7.0.6
  • WordPress 7.0.7
  • WordPress 7.1
  • WordPress 7.1.1
  • WordPress 7.1.2
  • WordPress 7.1.3

Stored Cross-Site Scripting in WPForms Payment Entry View

Skrevet den af i WPForms

WPForms up to 2.0.0.2 lets an