WordPress Plugin Vulnerabilities

Blog Designer <= 1.8.10 - Unauthenticated Stored Cross-Site Scripting (XSS)

Description

The Blog Designer WordPress plugin was affected by an Unauthenticated Stored Cross-Site Scripting (XSS) security vulnerability.

Proof of Concept

Affects Plugins

Plugin icon
blog-designer
Fixed in 1.8.11

References

URL
https://www.webarxsecurity.com/wordpress-plugin-blog-designer/

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Original Researcher
Luka Sikic
Submitter
WebARX Security
Submitter website
https://www.webarxsecurity.com
Submitter twitter
webarx_security
Verified
No
WPVDB ID
c058f7f7-da6a-43cc-b4fd-0dac01e7dcd1

Timeline

Publicly Published
2019-05-01 (about 6 years ago)
Added
2019-05-02 (about 6 years ago)
Last Updated
2019-11-01 (about 6 years ago)

Other

Published
Title
Published
2025-01-16
Title
Bauernregeln <= 1.0.1 - Reflected Cross-Site Scripting
Published
2016-04-12
Title
HDW WordPress Video Gallery <= 1.2 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Published
2021-06-15
Title
RSS for Yandex Turbo < 1.31 - Admin+ Stored Cross-Site Scripting
Published
2022-11-23
Title
Activello <= 1.4.4 - Reflected XSS
Published
2024-06-12
Title
PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) < 2.7.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link Effects Widget