WordPress Plugin Vulnerabilities

IgnitionDeck 1.1 - Purchase Form Unspecified XSS

Description

The IgnitionDeck Crowdfunding & Commerce WordPress plugin was affected by a Purchase Form Unspecified XSS security vulnerability.

Affects Plugins

Plugin icon
ignitiondeck
Fixed in 1.2

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
574b367a-a2d6-4755-824d-adde2fb2026e

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2016-05-02
Title
bbPress <= 2.5.8 - Stored Cross-Site Scripting (XSS)
Published
2026-02-24
Title
Musico < 3.4.5 - Reflected Cross-Site Scripting
Published
2024-05-27
Title
Easy Notify Lite < 1.1.33 - Contributor+ Stored XSS
Published
2021-09-21
Title
Fetch Tweets <= 2.6.4 - Reflected Cross-Site Scripting
Published
2021-08-06
Title
Highlight < 0.9.3 - Authenticated Stored Cross-Site Scripting