WordPress Plugin Vulnerabilities

Flexible Custom Post Type < 0.1.7 - XSS

Description

The flexible-custom-post-type WordPress plugin was affected by a XSS security vulnerability.

Affects Plugins

Plugin icon
flexible-custom-post-type
Fixed in 0.1.7

References

CVE
CVE-2011-5106
URL
https://exchange.xforce.ibmcloud.com/vulnerabilities/71415

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
3f3cdd73-3981-4c5b-8bfa-c96e2eb670c9

Timeline

Publicly Published
2011-11-17 (about 14 years ago)
Added
2019-08-23 (about 6 years ago)
Last Updated
2019-11-28 (about 6 years ago)

Other

Published
Title
Published
2023-08-18
Title
Plugins List < 2.5.1 - Admin+ Stored XSS
Published
2024-01-17
Title
WP Recipe Maker < 9.1.1 - Contributor+ Stored Cross-Site Scripting via header_tag
Published
2020-04-02
Title
Contact Form 7 Datepicker <= 2.6.0 - Authenticated Stored Cross-Site Scripting (XSS)
Published
2023-11-14
Title
Footer Putter <= 6.1.3 - Reflected Cross-Site Scripting
Published
2025-03-26
Title
Charitable < 1.8.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting