Themes Vulnerabilities

Cover WP < 1.6.6 - XSS

Description

The cover-wp WordPress theme was affected by a XSS security vulnerability.

Affects Themes

cover-wp
Fixed in 1.6.6

References

CVE
CVE-2011-3860

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
f1dd72c0-6039-45c3-8aee-1b40d66af749

Timeline

Publicly Published
2011-10-24 (about 14 years ago)
Added
2019-08-23 (about 6 years ago)
Last Updated
2019-11-28 (about 6 years ago)

Other

Published
Title
Published
2025-04-10
Title
UXsniff <= 1.2.8 - Reflected Cross-Site Scripting
Published
2023-03-22
Title
Pricing Tables For WPBakery Page Builder < 3.0 - Contributor+ Stored XSS
Published
2025-10-16
Title
WPCasa < 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2024-06-27
Title
Progress Planner < 0.9.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Published
2023-01-20
Title
CTT Expresso para WooCommerce < 3.2.12 - Admin+ Stored XSS