WordPress Plugin Vulnerabilities

Themify - Post Type Builder Search Addon < 1.4.0 - Reflected Cross-Site Scripting

Description

The plugin does not properly escape the current page URL before reusing it in a HTML attribute, leading to a reflected cross site scripting vulnerability.

Proof of Concept

Affects Plugins

Plugin icon
themify-ptb-search
Fixed in 1.4.0

References

CVE
CVE-2022-1047

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Original Researcher
Kevin Barbón García, David Álvarez Robles, Francisco Díaz-Pache Alonso & Sergio Corral Cristo
Submitter
Kevin Barbón García
Submitter website
https://blog.asturhackers.com
Submitter twitter
AsturHackers
Verified
Yes
WPVDB ID
078bd5f6-64f7-4665-825b-9fd0c2b7b91b

Timeline

Publicly Published
2022-04-12 (about 3 years ago)
Added
2022-04-12 (about 3 years ago)
Last Updated
2022-04-13 (about 3 years ago)

Other

Published
Title
Published
2024-10-03
Title
Code Embed < 2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2016-09-22
Title
Google Document Embedder < 2.6.1 - XSS
Published
2025-11-09
Title
Travelers' Map < 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2024-06-03
Title
Slider Revolution < 6.7.11 - Authenticated (Author+) Stored Cross-Site Scripting via Add Layer class, id, and title Attributes
Published
2025-10-02
Title
Meks Easy Maps <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting