Vulnerabilities and security researches forwp-flipclock wp-flipclock

Jun 07, 2024

CVE, Research URL: CVE-2023-23728
Home page URL: Security reports for WP Flipclock
Application: WP Flipclock
Date: Mar 23, 2023
Research Description: Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Winwar Media WP Flipclock plugin <= 1.7.4 versions.
Affected versions: Min -, max -.
Status: vulnerable

Apr 18, 2025

CVE, Research URL: CVE-2025-39540
Home page URL: Security reports for WP Flipclock
Application: WP Flipclock
Date: Apr 16, 2025
Research Description: WP Flipclock [wp-flipclock] <= 1.9 (unfixed) CVE-2025-39540 [en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rhys Wynne WP Flipclock allows DOM-Based XSS. This issue affects WP Flipclock: from n/a through 1.9.
Affected versions: Min -, max -.
Status: vulnerable