The Download Manager plugin for WordPress, developed by codename065, is affected by a reflected Cross-Site Scripting (XSS) vulnerability via the 'REFERRER' parameter. This vulnerability exists in all versions up to and including 3.3.57 due to insufficient input sanitization and output escaping. An unauthenticated attacker can exploit this flaw to inject arbitrary scripts that execute in the context of a victim's browser, potentially leading to information disclosure or session hijacking. The vulnerability has a CVSS 3.1 score of 6.1, indicating a medium severity level.
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy WordPress plugin versions up to and including 3.6.9 contain a stored cross-site scripting (XSS) vulnerability. This flaw arises from improper sanitization and escaping of PayPal IPN parameters, allowing unauthenticated attackers to inject malicious scripts that execute when users access affected pages. The vulnerability has a high severity rating with a CVSS score of 7.2.
The Graphene WordPress theme up to version 2.9.4 contains a stored cross-site scripting (XSS) vulnerability in the 'Current location' and 'Author profile image URL' profile fields. Authenticated users with Subscriber-level access or higher can inject malicious scripts that execute when other users view the affected pages. This vulnerability arises from insufficient input sanitization and output escaping.
The Brizy – Page Builder plugin for WordPress contains a stored cross-site scripting (XSS) vulnerability in the 'brizy-compiled-sections' parameter. This vulnerability affects all versions up to and including 2.8.18. Authenticated users with contributor-level access or higher can inject malicious scripts that execute when other users view the affected pages. The vulnerability arises from insufficient input sanitization and output escaping.
JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress versions up to 3.6.6 is vulnerable to reflected DOM-based cross-site scripting (XSS). The vulnerability arises from insufficient input sanitization and output escaping of a query parameter matching the preset's query_var setting. An unauthenticated attacker can exploit this by tricking a user into clicking a crafted link, causing arbitrary script execution on pages embedding a form with specific text field configurations. This vulnerability has a medium severity rating with a CVSS score of 4.7.
The Noptin plugin for WordPress, used for newsletters and email automation, is vulnerable to stored cross-site scripting (XSS) in all versions up to and including 4.3.10. This vulnerability arises from insufficient input sanitization and output escaping of the 'noptin_fields[<custom_field_merge_tag>]' parameter. An unauthenticated attacker can inject malicious scripts that execute when a user accesses a page containing the injected content. Exploitation requires a published campaign post with a subscriber merge tag and involves social engineering to trick privileged users into visiting a crafted campaign preview URL.
The Data Tables Generator by Supsystic WordPress plugin is affected by a stored cross-site scripting (XSS) vulnerability in all versions up to and including 1.12.03. This vulnerability allows authenticated users with contributor-level access or higher to inject malicious scripts via the id attribute, which execute when other users view the affected pages. The issue arises from insufficient input sanitization and output escaping.
The Podlove Podcast Publisher WordPress plugin is affected by a stored cross-site scripting (XSS) vulnerability via the Auphonic webhook endpoint in all versions up to and including 4.5.6. This vulnerability allows unauthenticated attackers to inject arbitrary scripts by submitting a crafted POST request where the status_string field is not 'Done'. The injected scripts execute when a user accesses the affected page, potentially leading to session hijacking or other malicious actions.
A stored cross-site scripting (XSS) vulnerability exists in the GiveWP – Donation Plugin and Fundraising Platform for WordPress, affecting versions up to and including 4.17.0. The flaw arises from insufficient sanitization and escaping of user-supplied shortcode attributes, allowing authenticated users with Contributor-level access or higher to inject malicious scripts. These scripts execute whenever a user views the affected page, potentially compromising user interactions.
The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor WordPress plugin is affected by a stored cross-site scripting (XSS) vulnerability in versions up to and including 3.7.12. This vulnerability arises from improper input sanitization and output escaping of the Block Font Family attribute. It can be exploited by authenticated users with author-level access or higher to inject malicious scripts that execute when other users view the affected pages. The vulnerability is only triggered if the 'Load Google Fonts Locally' option is enabled, which is not the default setting.
Presto Player plugin for WordPress versions up to and including 4.5.1 is vulnerable to stored cross-site scripting (XSS) via the comment content processed by the <presto-player> tag. This vulnerability allows unauthenticated attackers to inject malicious scripts that execute when users view the affected pages. Initial comment approval is required, but subsequent comments from the same author may be auto-approved by default WordPress settings, enabling persistent exploitation.
The Embed Any Document plugin for WordPress has a stored cross-site scripting (XSS) vulnerability in the 'embeddoc' shortcode in all versions up to and including 2.7.13. Authenticated users with contributor-level access or higher can inject malicious scripts that execute when other users view the affected pages. This vulnerability arises from insufficient input sanitization and output escaping.
The Getwid – Gutenberg Blocks WordPress plugin is affected by a stored cross-site scripting (XSS) vulnerability in the 'data-image-points' parameter. This vulnerability exists in all versions up to and including 3.0.1. Authenticated users with contributor-level access or higher can exploit this flaw to inject malicious scripts that execute when other users view the affected pages. The vulnerability arises from insufficient input sanitization and output escaping.
The Church Admin WordPress plugin up to version 5.1.2 is vulnerable to stored Cross-Site Scripting (XSS) via the 'email' parameter. Authenticated users with subscriber-level access or higher can inject malicious scripts that execute when other users view the affected pages. This vulnerability arises from insufficient input sanitization and output escaping.
The Real Estate Manager – Property Listing and Agent Management WordPress plugin is affected by a stored cross-site scripting (XSS) vulnerability in the 'first_name' parameter in all versions up to and including 7.3. This vulnerability allows unauthenticated attackers to inject malicious scripts that execute when users view the affected pages. The plugin's reCAPTCHA validation can be bypassed by omitting the g-recaptcha-response parameter, making exploitation easier. The vulnerability has a high severity rating with a CVSS score of 7.2.
HivePress – Business Directory, Listings & Classified Ads Plugin for WordPress versions up to and including 1.7.31 contains a stored cross-site scripting (XSS) vulnerability. This flaw arises from improper sanitization and escaping of user input in the 'custom text attribute' parameter, allowing authenticated users with subscriber-level access or higher to inject malicious scripts. Exploitation requires that an administrator has configured a Text attribute displaying the %value% token inside an HTML attribute, a known HivePress pattern.
A stored cross-site scripting (XSS) vulnerability exists in the GamiPress WordPress plugin up to version 7.9.4. The issue arises from improper sanitization and escaping of the 'video_id' parameter, allowing authenticated users with subscriber-level access or higher to inject malicious scripts. These scripts execute when other users access the affected pages, potentially leading to session hijacking or other script-based attacks.
The Sonaar MP3 Audio Player WordPress plugin versions up to and including 5.14.2 contain a stored cross-site scripting (XSS) vulnerability via shortcode attributes. Authenticated users with contributor-level access or higher can inject malicious scripts that execute when other users view the affected pages. This occurs because input sanitization and output escaping are insufficient, and WordPress's save-time filtering does not neutralize payloads delivered through shortcode attributes.
The Table Field Add-on for ACF and SCF WordPress plugin contains a stored cross-site scripting (XSS) vulnerability in all versions up to and including 1.3.35. Authenticated users with Contributor-level access or higher can inject malicious scripts via table cell content, which execute when other users view the affected pages. This vulnerability arises from insufficient input sanitization and output escaping.
The Download Manager plugin for WordPress contains a stored cross-site scripting (XSS) vulnerability in the 'not_found' parameter. This vulnerability affects all versions up to and including 3.3.58. Authenticated users with Contributor-level access or higher can inject malicious scripts that execute when other users view the affected pages. The vulnerability arises from insufficient input sanitization and output escaping.