WordPress Plugin Vulnerabilities

SS Downloads 1.4.4.1 - ss-downloads.php Multiple Variables XSS

Description

The SS Downloads WordPress plugin was affected by a ss-downloads.php Multiple Variables XSS security vulnerability.

Affects Plugins

Plugin icon
ss-downloads
Fixed in 1.5

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
c9fa65e8-08ce-4a6e-b253-aee1ae837d22

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2025-01-14
Title
WP Projects Portfolio with Client Testimonials <= 3.0 - Reflected XSS
Published
2025-05-02
Title
Xavin's Review Ratings <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2023-07-13
Title
WPFunnels < 2.7.17 - Reflected Cross-Site Scripting
Published
2024-04-16
Title
QR Code Composer < 2.0.4 - Subscriber+ Stored XSS
Published
2025-07-23
Title
WP Applink <= 0.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via title Parameter