WordPress Plugin Vulnerabilities

WP Tmkm Amazon < 1.5.3 - XSS

Description

The wp-tmkm-amazon WordPress plugin was affected by a XSS security vulnerability.

Affects Plugins

Plugin icon
wp-tmkm-amazon
Fixed in 1.5.3

References

CVE
CVE-2014-4598
URL
https://codevigilant.com/disclosure/wp-plugin-wp-tmkm-amazon-a3-cross-site-scripting-xss

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
b79ce85e-cb22-4f72-8071-f56b469e96b7

Timeline

Publicly Published
2014-06-12 (about 11 years ago)
Added
2019-08-23 (about 6 years ago)
Last Updated
2019-11-28 (about 6 years ago)

Other

Published
Title
Published
2025-05-07
Title
CBX Map for Google Map & OpenStreetMap < 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2025-12-05
Title
myLCO <= 0.8.1 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Published
2025-02-23
Title
Contact Form Plugin < 1.1.27 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2025-09-23
Title
Simple SEO < 2.0.32 - Contributor+ Stored XSS
Published
2023-06-19
Title
Enable SVG Uploads <= 2.1.5 - Author+ Stored XSS via SVG