WordPress Plugin Vulnerabilities

Google SEO Pressor Snippet <= 1.2.6 - Reflected Cross-Site Scripting (XSS)

Description

The Google SEO Pressor for Rich snippets WordPress plugin was affected by a Reflected Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
google-seo-author-snippets
Fixed in 1.2.7

References

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
c24cf88a-0bd5-482e-9b43-52b1cb168c45

Timeline

Publicly Published
2016-04-21 (about 10 years ago)
Added
2016-04-22 (about 10 years ago)
Last Updated
2019-10-31 (about 6 years ago)

Other

Published
Title
Published
2024-07-01
Title
Cost Calculator Builder < 3.2.13 - Authenticated (Administrator+) Stored Cross-Site Scripting
Published
2025-01-16
Title
WordPress 淘宝客插件 <= 1.1.2 - Reflected Cross-Site Scripting
Published
2025-06-19
Title
WP-FB-AutoConnect <= 4.6.4 - Admin+ Stored XSS
Published
2024-06-28
Title
WP Photo Album Plus < 8.8.00.003 - Reflected Cross-Site Scripting
Published
2025-01-06
Title
Image Magnify <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting