WordPress Plugin Vulnerabilities

Plugmatter Pricing Table Lite <= 1.0.32 - Reflected Cross-Site Scripting

Description

The plugin is vulnerable to Reflected Cross-Site Scripting via the email parameter in the ~/license.php file which allows attackers to inject arbitrary web scripts

Affects Plugins

Plugin icon
plugmatter-pricing-table
No known fix

References

CVE
CVE-2021-34659
URL
https://www.wordfence.com/vulnerability-advisories/#CVE-2021-34659

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
7.1 (high)

Miscellaneous

Original Researcher
p7e4
Verified
No
WPVDB ID
2cf248bf-5171-4bff-aff1-b9d38721551b

Timeline

Publicly Published
2021-08-13 (about 2 years ago)
Added
2021-08-13 (about 2 years ago)
Last Updated
2022-04-12 (about 1 years ago)

Other

Published
Title
Published
2023-05-25
Title
Mocho Blog <= 1.0.4 - Reflected XSS
Published
2021-07-19
Title
Mimetic Books <= 0.2.13 - Authenticated Stored Cross-Site Scripting (XSS)
Published
2021-02-01
Title
Ivory Search < 4.5.11 - Authenticated Reflected Cross-Site Scripting (XSS)
Published
2019-05-16
Title
Live Chat with Facebook Messenger <= 1.4.6 - Stored XSS
Published
2022-12-02
Title
ImageInject <= 1.17 - Admin+ Stored XSS