WordPress Plugin Vulnerabilities

WP jQuery Spam 1.1 - dynamic.php id Parameter Reflected XSS

Description

The WP jQuery Spam WordPress plugin was affected by a dynamic.php id Parameter Reflected XSS security vulnerability.

Affects Plugins

Plugin icon
wp-jquery-spam
Fixed in 1.2

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
0f9f9612-4f0b-4d8a-8401-4c295adf0c68

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2026-03-23
Title
Gyan Elements < 2.2.2 - Reflected Cross-Site Scripting
Published
2024-11-08
Title
Photographer Connections <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2025-12-04
Title
Cool Tag Cloud <= 2.29 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2021-10-01
Title
Ivory Search < 4.7 - Reflected Cross-Site Scripting
Published
2017-02-20
Title
rockhoist-badges 1.2.2 - Authenticated Stored Cross-Site Scripting (XSS)