- Published on
-
Jan 09, 2025
- Research Description
-
The Aklamator INfeed WordPress plugin through 2.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
- Affected versions
-
Min -, max 2.0.0.
| New vulnerability |
|
Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media
(CVE-2024-12071)
, Jan 19, 2025
|
|
Smart Manager – WooCommerce Bulk Edit Products, Orders, Coupons, Any WordPress Post Type (Advanced)
(CVE-2025-22710)
, Jan 19, 2025
|
|
JSM Screenshot Machine Shortcode
(CVE-2024-13385)
, Jan 19, 2025
|
|
Verge3D Publishing and E-Commerce
(CVE-2025-22709)
, Jan 19, 2025
|
|
VikAppointments Services Booking Calendar
(CVE-2025-22719)
, Jan 19, 2025
|