WordPress Plugin Vulnerabilities

Mingle Forum 1.0.33.3 - wpf.class.php search_words Parameter XSS

Description

The mingle-forum WordPress plugin was affected by a wpf.class.php search_words Parameter XSS security vulnerability.

Affects Plugins

Plugin icon
mingle-forum
Fixed in 1.0.34

References

CVE
CVE-2013-0734

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
f431771b-83e0-4401-944c-2cfe7fbfda53

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-05-29
Title
Minimal Share Buttons < 1.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Parameter
Published
2025-09-05
Title
Translate This gTranslate Shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2022-12-19
Title
Table of Contents Plus < 2212 - Contributor+ Stored XSS
Published
2022-08-30
Title
Beaver Builder < 2.5.5.3 - Authenticated Stored XSS via Caption On Hover
Published
2023-09-11
Title
MapPress Maps for WordPress < 2.88.5 - Contributor+ Stored XSS