WordPress Plugin Vulnerabilities

Wikipop <= 2.0 - Cross-Site Scripting (XSS)

Description

Plugin is still affected and has been closed.

Affects Plugins

Plugin icon
wikipop
No known fix

References

CVE
CVE-2014-4575
URL
https://codevigilant.com/disclosure/wp-plugin-wikipop-a3-cross-site-scripting-xss

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
5e06ccc9-776e-43e1-b44a-05527df56385

Timeline

Publicly Published
2014-06-12 (about 11 years ago)
Added
2019-08-23 (about 6 years ago)
Last Updated
2020-03-03 (about 6 years ago)

Other

Published
Title
Published
2021-12-28
Title
UpdraftPlus < 1.16.69 - Reflected Cross-Site Scripting
Published
2024-06-11
Title
Futurio Extra < 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Text Block Widget
Published
2024-09-25
Title
Meta slider and carousel with lightbox < 2.0.2 - Authenticated (Author+) Stored Cross-Site Scripting
Published
2014-08-01
Title
Better WP Security 3.5.5 - inc/admin/content.php id_specialfile Parameter Stored XSS
Published
2025-01-06
Title
Image Magnify <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting