WordPress Plugin Vulnerabilities

Blue Wrench Video Widget 1.0.2 - Multiple Stored Cross-Site Scripting (XSS)

Description

The Blue Wrench Video Widget WordPress plugin was affected by a Multiple Stored Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
blue-wrench-videos-widget
Fixed in 2.0.0

References

CVE
CVE-2013-6797

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
63e972b7-dcda-4cc6-97e2-0bf8125e4d6c

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2024-06-05
Title
Clever Addons for Elementor < 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple CAFE Widgets
Published
2023-01-20
Title
Amazon JS <= 0.10 - Contributor+ Stored XSS
Published
2023-03-14
Title
Admin side data storage for Contact Form 7 <= 1.1.1 - Unauthenticated Reflected XSS
Published
2025-01-06
Title
Infility Global < 2.9.9 - Reflected XSS via set_type Parameter
Published
2015-08-10
Title
Google Analytics by Yoast <= 5.4.4 - Authenticated Stored Cross-Site Scripting (XSS)