WordPress Plugin Vulnerabilities

Delightful Downloads 1.3.1.1 - includes/functions.php User-Agent HTTP Header Stored XSS

Description

The Delightful Downloads WordPress plugin was affected by an includes/functions.php User-Agent HTTP Header Stored XSS security vulnerability.

Affects Plugins

Plugin icon
delightful-downloads
Fixed in 1.3.2

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
111981f5-3d88-4e3f-970d-ee60f4d77ba2

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2025-11-10
Title
Skip to Timestamp <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Published
2015-08-21
Title
YITH Maintenance Mode < 1.2.0 - Authenticated Reflected Cross-Site Scripting (XSS)
Published
2022-12-28
Title
ShiftNav – Responsive Mobile Menu < 1.7.2 - Contributor+ Stored XSS in Shortcode
Published
2025-04-14
Title
ShopApper <= 0.4.59 - Unauthenticated Stored Cross-Site Scripting
Published
2023-03-02
Title
Button Generator - easily Button Builder < 2.3.4 - Admin+ Stored XSS