WordPress Plugin Vulnerabilities

Gnucommerce < 1.4.2 - XSS

Description

The GNUCommerce WordPress plugin was affected by a XSS security vulnerability.

Affects Plugins

Plugin icon
gnucommerce
Fixed in 1.4.2

References

CVE
CVE-2017-18572

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Verified
No
WPVDB ID
49b39057-0a8c-4c17-a524-e5b3aa889eb8

Timeline

Publicly Published
2017-03-01 (about 9 years ago)
Added
2019-08-22 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2024-03-29
Title
Yoo Slider < 2.2.0 - Reflected Cross-Site Scripting
Published
2023-06-26
Title
Membership Plugin - Restrict Content < 3.2.3 - Reflected XSS
Published
2024-05-21
Title
WPKoi Templates for Elementor < 2.5.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Parameters
Published
2025-06-05
Title
Greenshift < 11.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2026-02-03
Title
Reflector < 1.2.3 - Reflected Cross-Site Scripting