WordPress Plugin Vulnerabilities

WP Blipbot <= 3.0.9 - XSS

Description

Plugin is still affected and has been closed.

Affects Plugins

Plugin icon
wp-blipbot
No known fix

References

CVE
CVE-2014-4580
URL
https://codevigilant.com/disclosure/wp-plugin-wp-blipbot-a3-cross-site-scripting-xss

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
0ccc19fd-09d2-4a26-98ba-d4b96ebf57dc

Timeline

Publicly Published
2014-06-12 (about 11 years ago)
Added
2019-08-23 (about 6 years ago)
Last Updated
2019-11-28 (about 6 years ago)

Other

Published
Title
Published
2021-08-16
Title
Easy Social Feed < 6.2.7 - Reflected Cross-Site Scripting (XSS)
Published
2014-10-18
Title
Contact Form Integrated With Google Maps 1.0-2.4 - Stored Cross-Site Scripting (XSS)
Published
2024-09-30
Title
Logo Carousel – Clients logo carousel for WP < 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2024-03-14
Title
oik < 4.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Published
2024-03-29
Title
Favorites < 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode