WordPress Plugin Vulnerabilities

Unconfirmed <= 1.2.4 - unconfirmed.php s Parameter Reflected XSS

Description

The Unconfirmed WordPress plugin was affected by an unconfirmed.php s Parameter Reflected XSS security vulnerability.

Affects Plugins

Plugin icon
unconfirmed
Fixed in 1.2.5

References

CVE
CVE-2014-100018

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
f6b857f7-8d39-43b3-adb0-8362d4f83b2a

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-04-22
Title
wProject < 5.8.0 - Reflected Cross-Site Scripting
Published
2015-02-22
Title
WooCommerce <= 2.2.10 - Cross-Site Scripting (XSS)
Published
2025-01-07
Title
Huurkalender WP < 1.6.0 - Contributor+ Stored XSS
Published
2015-08-22
Title
MDC Private Message <= 1.0.0 - Authenticated Stored Cross-Site Scripting (XSS)
Published
2020-01-22
Title
Ultimate Addons for Beaver Builder < 1.25.0 - Cross-Site Scripting (XSS)