WordPress Plugin Vulnerabilities

Statpresscn <= 1.9.0 - Multiple XSS

Description

The StatPressCN WordPress plugin was affected by a Multiple XSS security vulnerability.

Affects Plugins

Plugin icon
statpresscn
Fixed in 1.9.1

References

CVE
CVE-2011-0641
URL
https://exchange.xforce.ibmcloud.com/vulnerabilities/64882

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
bdac667d-bb86-4266-b2a5-fd0b422ca062

Timeline

Publicly Published
2011-01-21 (about 15 years ago)
Added
2019-08-23 (about 6 years ago)
Last Updated
2019-11-28 (about 6 years ago)

Other

Published
Title
Published
2025-04-17
Title
BruteGuard – Brute Force Login Protection <= 0.1.4 - Reflected Cross-Site Scripting
Published
2025-04-17
Title
Login Manager – Design Login Page, View Login Activity, Limit Login Attempts <= 2.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via Custom URL
Published
2024-04-24
Title
Premium Addons for Elementor < 4.10.29 - Contributor+ Stored Cross-Site Scripting
Published
2025-06-20
Title
3D FlipBook - Lite Edition < 1.16.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via style and mode Parameters
Published
2026-02-19
Title
Quiz Maker < 6.7.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode