WordPress Plugin Vulnerabilities

Wassup < 1.8.3.1 - XSS

Description

The WassUp Real Time Analytics WordPress plugin was affected by a XSS security vulnerability.

Affects Plugins

Plugin icon
wassup
Fixed in 1.8.3.1

References

CVE
CVE-2012-2633
URL
https://jvn.jp/en/jp/JVN15646988/
URL
https://jvndb.jvn.jp/jvndb/JVNDB-2012-000058

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
59e9cb0e-8bbc-4014-ae35-f764067a4a5c

Timeline

Publicly Published
2012-06-06 (about 13 years ago)
Added
2019-08-26 (about 6 years ago)
Last Updated
2019-11-28 (about 6 years ago)

Other

Published
Title
Published
2026-01-22
Title
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin < 7.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Published
2022-10-13
Title
WPB Show Core <= 2.2 - Reflected Cross-Site Scripting
Published
2016-04-06
Title
Ultimate Member < 1.3.40 - Cross-Site Scripting (XSS)
Published
2022-12-13
Title
Image Hover Effects Ultimate 9.8.1-9.8.4 - Admin+ Stored XSS
Published
2025-10-12
Title
TheGem Theme Elements (for Elementor) < 5.10.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting