WordPress Plugin Vulnerabilities

Spots.IM Comments < 4.0.4 - Multiple Vulnerabilities

Description

Various XSS issues and Full Path Disclosure

Affects Plugins

Plugin icon
spotim-comments
Fixed in 4.0.4

References

CVE
CVE-2017-18608
URL
https://plugins.trac.wordpress.org/changeset?reponame=&new=1640493%40spotim-comments&old=1439993%40spotim-comments

Miscellaneous

Verified
No
WPVDB ID
ea4b60ce-8319-4f26-9b8e-0513b61cba55

Timeline

Publicly Published
2017-04-19 (about 9 years ago)
Added
2019-06-19 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2015-07-25
Title
Unite Gallery Lite < 1.5 - CSRF & Authenticated SQL Injection
Published
2014-08-01
Title
IWantOneButton 3.0.1 - Multiple Vulnerabilities
Published
2014-12-14
Title
WP-FB-AutoConnect <= 4.0.5 - XSS/CSRF
Published
2018-05-10
Title
Ultimate Member < 2.0.4 - Multiple Issues
Published
2020-01-27
Title
CarSpot < 2.2.3 - Multiple Vulnerabilities