WordPress Plugin Vulnerabilities

Multiple Domain < 1.0.3 - XSS in Canonical/Alternate Tags

Description

The Multiple Domain WordPress plugin fixed a Cross-Site Scripting (XSS) vulnerability in its Canonical/Alternate Tags.

Affects Plugins

Plugin icon
multiple-domain
Fixed in 1.0.3

References

URL
https://plugins.trac.wordpress.org/changeset/2233173/multiple-domain

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
3.5 (low)

Miscellaneous

Submitter
Ryan
Verified
No
WPVDB ID
146c111a-6186-4ecc-a3d0-77d69841117c

Timeline

Publicly Published
2020-01-25 (about 6 years ago)
Added
2020-06-01 (about 5 years ago)
Last Updated
2020-06-01 (about 5 years ago)

Other

Published
Title
Published
2025-12-15
Title
User Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction & Membership Plugin < 4.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Published
2025-08-27
Title
UsersWP < 1.2.43 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2025-10-03
Title
Contest Gallery – Upload, Vote & Sell with PayPal and Stripe < 27.0.3 - Authenticated (Author+) Stored Cross-Site Scripting
Published
2023-02-28
Title
WP No External Links <= 1.0.2 - Admin+ Stored XSS
Published
2025-12-31
Title
Sermon Manager <= 2.30.0 - Authenticated (Contributor+) Stored Cross-Site Scripting