WordPress Plugin Vulnerabilities

WangGuard <= 1.7.1 - Cross-Site Scripting (XSS)

Description

The wangguard WordPress plugin was affected by a Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
wangguard
Fixed in 1.7.2

References

URL
https://seclists.org/bugtraq/2016/Aug/25
URL
https://sumofpwn.nl/advisory/2016/cross_site_scripting_in_wangguard_wordpress_plugin.html

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
d33e516f-f373-4d27-9e9a-83fa67399f8c

Timeline

Publicly Published
2016-08-02 (about 9 years ago)
Added
2016-08-03 (about 9 years ago)
Last Updated
2019-11-01 (about 6 years ago)

Other

Published
Title
Published
2024-10-24
Title
Raptor Editor <= 1.0.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2026-02-26
Title
Lawyer Directory <= 1.3.2 - Unauthenticated Stored Cross-Site Scripting
Published
2026-01-06
Title
My Album Gallery <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style_css' Shortcode Attribute
Published
2015-02-11
Title
Facebook (spider-facebook) <= 1.0.10 - Cross-Site Scripting (XSS)
Published
2025-04-09
Title
MultiMailer <= 1.0.3 - Reflected Cross-Site Scripting