WordPress Plugin Vulnerabilities

WP Recentcomments < 2.0.7 - XSS

Description

The WP-RecentComments WordPress plugin was affected by a XSS security vulnerability.

Affects Plugins

Plugin icon
wp-recentcomments
Fixed in 2.0.7

References

CVE
CVE-2012-1068
URL
https://exchange.xforce.ibmcloud.com/vulnerabilities/70003

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
47eeca4f-72ca-46e4-a2f4-793275a1dd76

Timeline

Publicly Published
2011-09-22 (about 14 years ago)
Added
2019-08-23 (about 6 years ago)
Last Updated
2019-11-28 (about 6 years ago)

Other

Published
Title
Published
2024-08-16
Title
Slideshow, Image Slider by 2J <= 1.3.54 - Reflected Cross-Site Scripting via 'post'
Published
2025-11-10
Title
Magazine Companion < 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2021-02-08
Title
Contact Form by Supsystic < 1.7.7 - Authenticated Stored Cross-Site Scripting (XSS)
Published
2024-11-07
Title
adBuddy+ (AdBlocker Detection) by NetfunkDesign <= 1.1.3 - Admin+ Stored XSS
Published
2020-07-27
Title
CarePlus <= 1.2 - Unauthenticated Reflected Cross-Site Scripting (XSS)