WordPress Plugin Vulnerabilities

WordPress Connect <= 2.0.3 - Editor Pages Unspecified XSS

Description

The WordPress Connect WordPress plugin was affected by an Editor Pages Unspecified XSS security vulnerability.

Affects Plugins

Plugin icon
wordpress-connect
No known fix

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
feaf7c04-4991-4c34-bfbf-d849a9e38599

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2025-09-26 (about 7 months ago)

Other

Published
Title
Published
2022-09-05
Title
Ldap WP Login / Active Directory Integration < 3.0.2 - Reflected Cross-Site Scripting
Published
2022-03-28
Title
Easy Digital Downloads < 2.11.6 - Admin+ Stored Cross-Site Scripting
Published
2022-07-09
Title
Ecwid Shopping Cart < 6.10.23 - Insufficient Access Control
Published
2025-03-03
Title
Slider by 10Web < 1.2.62 - Admin+ Stored XSS via Widget
Published
2022-04-19
Title
Bulk Edit and Create User Profiles < 1.5.14 - Admin+ Stored Cross-Site Scripting