WordPress Plugin Vulnerabilities

Connections <= 0.7.1.5 - Unspecified Security

Description

The Connections Business Directory WordPress plugin was affected by an Unspecified Security security vulnerability.

Affects Plugins

Plugin icon
connections
Fixed in 0.7.1.5

References

CVE
CVE-2011-5254

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
cd25f63b-ad05-4d7a-89ba-7b8e2ce430b8

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2017-03-01
Title
WP-SpamFree Anti-Spam - Authenticated Reflected Cross-Site Scripting (XSS)
Published
2017-09-19
Title
WordPress 4.2.3-4.8.1 - Authenticated Cross-Site Scripting (XSS) in Visual Editor
Published
2025-08-01
Title
Custom Word Cloud <= 0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via angle Parameter
Published
2025-08-18
Title
King Addons for Elementor <= 51.1.58 - Contributor+ Stored XSS
Published
2024-09-12
Title
Email Obfuscate Shortcode <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting