WordPress Plugin Vulnerabilities

Dave's WordPress Live Search <= 4.5 - Reflected Cross-Site Scripting (XSS)

Description

From changelog: "Fixed cross-site scripting vulnerability in unsanitized "tab" parameter on admin pages"

Affects Plugins

Plugin icon
daves-wordpress-live-search
Fixed in 4.6

References

URL
https://plugins.trac.wordpress.org/changeset/1648992

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
6984af1a-d907-4ff3-bd71-f25a0c42a020

Timeline

Publicly Published
2017-05-01 (about 9 years ago)
Added
2018-03-19 (about 8 years ago)
Last Updated
2021-01-19 (about 5 years ago)

Other

Published
Title
Published
2023-01-24
Title
Shortcode for Font Awesome < 1.4.1 - Contributor+ Stored XSS
Published
2023-02-20
Title
Clio Grow < 1.0.1 - Admin+ Stored XSS
Published
2025-06-18
Title
Pixel Manager for WooCommerce (PRO) < 1.49.1 - Authenticated (Contributor+) Cross-Site Scripting via Shortcode
Published
2014-08-01
Title
bib2html 0.9.3 - /OSBiB/create/index.php styleShortName Parameter XSS
Published
2022-12-15
Title
WP CSV <= 1.8.0.0 - Reflected XSS via CSV Import