WordPress Plugin Vulnerabilities

Heat Trackr <= 1.0 - XSS

Description

The heat-trackr WordPress plugin was affected by a XSS security vulnerability.

Affects Plugins

Plugin icon
heat-trackr
Fixed in 1.01

References

CVE
CVE-2016-1000136
URL
http://www.vapidlabs.com/wp/wp_advisory.php?v=798

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Verified
No
WPVDB ID
46670e6e-16de-4507-a49a-b16790c07eb1

Timeline

Publicly Published
2016-10-21 (about 9 years ago)
Added
2019-08-23 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2023-06-22
Title
About Me 3000 widget <= 2.2.6 - Administrator Stored Cross-Site Scripting
Published
2014-08-01
Title
AB Categories Search Widget 0.1 - s Parameter Reflected XSS
Published
2022-09-08
Title
Culture Object < 4.1.1 - Admin+ Stored Cross-Site Scripting
Published
2022-10-13
Title
WPB Show Core <= 2.2 - Reflected Cross-Site Scripting
Published
2016-10-05
Title
WP Editor <= 1.2.6.2 - Multiple Cross-Site Scripting (XSS)