WordPress Plugin Vulnerabilities

Weblibrarian < 3.4.8.6 - XSS

Description

The WebLibrarian WordPress plugin was affected by a XSS security vulnerability.

Affects Plugins

Plugin icon
weblibrarian
Fixed in 3.4.8.6

References

CVE
CVE-2017-18539

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Verified
No
WPVDB ID
109a4a6e-b2c9-4bbb-8bd1-0c92ba0684b9

Timeline

Publicly Published
2017-07-25 (about 8 years ago)
Added
2019-08-24 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2026-01-06
Title
EDD Download Info <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Published
2024-07-09
Title
ARForms Form Builder < 1.6.8 - Reflected Cross-Site Scripting
Published
2023-08-14
Title
WebLibrarian <= 3.5.8.4 - Reflected XSS
Published
2025-09-22
Title
Genesis Club Lite <= 1.17 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2024-11-11
Title
Contact Form 7 Redirect & Thank You Page < 1.0.7 - Reflected Cross-Site Scripting