WordPress Plugin Vulnerabilities

Moreads Se < 1.4.7 - XSS

Description

The moreAds SE WordPress plugin was affected by a XSS security vulnerability.

Affects Plugins

Plugin icon
moreads-se
Fixed in 1.4.7

References

CVE
CVE-2017-18526

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Verified
No
WPVDB ID
98667175-4e11-4422-a8bf-9ba9a56bd60a

Timeline

Publicly Published
2017-01-17 (about 9 years ago)
Added
2019-08-22 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2025-06-19
Title
IP Based Login < 2.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Published
2018-04-27
Title
PixelYourSite < 5.3.0 - XSS
Published
2025-10-02
Title
Ultimate Multi Design Video Carousel <= 1.4 - Authenticated (Editor+) Stored Cross-Site Scripting
Published
2022-11-17
Title
News Announcement Scroll < 9.0.0 - Admin+ Stored XSS
Published
2025-01-16
Title
CtyGrid Hyp3rL0cal Search WordPress Plugin <= 0.1.1.1 - Reflected Cross-Site Scripting