CVE-2023-47657 - Authenticated Stored XSS in GrandPlugins Direct Checkout – Quick View – Buy Now For WooCommerce (<= 1.5.8)
WordPress is one of the most widely used platforms for e-commerce sites. It owes much of its functionality to plugins, especially those helping store owners
CVE-2023-47229 - Stored XSS in Top 25 Social Icons Plugin (<=3.1) — How Contributors Can Exploit It
CVE-2023-47229 is a stored Cross-Site Scripting (XSS) vulnerability found in the “Top 25 Social Icons” WordPress plugin, versions up to and including 3.1, developed
CVE-2023-47226 - How an Authenticated (Admin+) Stored XSS in Post Sliders & Post Grids WordPress Plugin (<= 1..20) Can Affect Your Site
In 2023, security researchers found a significant vulnerability in the WordPress plugin "Post Sliders & Post Grids by I Thirteen Web Solution." This
CVE-2023-46643 - Unauthenticated Reflected Cross-Site Scripting (XSS) Vulnerability in the CloudNet360 WordPress Plugin (<= 3.2.)
---
Overview
On October 30th, 2023, a security vulnerability was publicly disclosed affecting CloudNet360, a popular WordPress plugin developed by Gary Jezorski. Tracked as CVE-2023-46643,
CVE-2023-46642 - Authenticated Stored XSS in SAHU TikTok Pixel for E-Commerce WordPress Plugin <= 1.2.2
If you're running an online store with WordPress and using the SAHU TikTok Pixel for E-Commerce plugin (version 1.2.2 or below)
Episode
00:00:00
00:00:00