WordPress Plugin Vulnerabilities

Developer Formatter 2013.0.1.40 - devformatter.php Multiple Field XSS

Description

The Developer Formatter WordPress plugin was affected by a devformatter.php Multiple Field XSS security vulnerability.

Affects Plugins

Plugin icon
devformatter
Fixed in 2013.0.1.41

References

URL
https://seclists.org/bugtraq/2013/Jan/91

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
665cb752-798f-4441-95a9-b65b594b11ae

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-06-23
Title
MagOne < 8.9 - Reflected Cross-Site Scripting
Published
2026-01-23
Title
ThemeRuby Multi Authors < 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'before' and 'after' Shortcode Attributes
Published
2021-06-28
Title
Event Geek <= 2.5.2 - Stored Cross-site Scripting (XSS)
Published
2025-04-29
Title
BP Messages Tool < 2.5 - Reflected Cross-Site Scripting
Published
2023-12-04
Title
Guest Author < 2.4 - Authenticated (Author+) Stored Cross-Site Scripting