WordPress Plugin Vulnerabilities

Multisite plugin Manager 3.1.1 - Two Cross-Site Scripting Vulnerabilities

Description

The Multisite Plugin Manager WordPress plugin was affected by a Two Cross-Site Scripting Vulnerabilities security vulnerability.

Affects Plugins

Plugin icon
multisite-plugin-manager
Fixed in 3.1.2

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
43f28c1d-2be7-420f-ad8f-aa6811d25ce9

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2023-12-22
Title
WP Crowdfunding < 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2024-01-26
Title
Allow SVG < 1.2.0 - Author+ Stored XSS via SVG
Published
2026-02-18
Title
Official StatCounter Plugin < 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Nickname
Published
2024-10-18
Title
Easy Addons for Elementor <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2023-02-20
Title
Gutenberg Blocks by WordPress Download Manager < 2.1.9 - Contributor+ XSS