Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-24572 State: PUBLISHED Published: 2021-11-01T08:46:01 Last Updated: 2024-08-03T19:35:20.165Z Vendors: Unknown Products: Accept Donations with PayPal Problem Types: CWE-352 Description: The Accept Donations with PayPal WordPress plugin before 1.3.1 provides a function to create donation buttons which are internally stored as posts. The deletion of a button is not CSRF protected and there is no control to check if the deleted post was a button post. As a result, an attacker could make logged in admins delete arbitrary posts Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/7b1ebd26-ea8b-448c-a775-66a04102e44f
CVE ID: CVE-2021-24574 State: PUBLISHED Published: 2021-08-23T11:10:18 Last Updated: 2024-08-03T19:35:20.295Z Vendors: Unknown Products: Simple Banner Problem Types: CWE-79 Description: The Simple Banner WordPress plugin before 2.10.4 does not sanitise and escape one of its settings, allowing high privilege users such as admin to use Cross-Site Scripting payload even when the unfiltered_html capability is disallowed. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/9adf7022-5108-43b7-bf0e-a42593185b74 - https://plugins.trac.wordpress.org/changeset/2571047/
CVE ID: CVE-2021-24575 State: PUBLISHED Published: 2021-11-08T17:34:44 Last Updated: 2024-08-03T19:35:20.174Z Vendors: Unknown Products: School Management System – WPSchoolPress Problem Types: CWE-89 Description: The School Management System – WPSchoolPress WordPress plugin before 2.1.10 does not properly sanitize or use prepared statements before using POST variable in SQL queries, leading to SQL injection in multiple actions available to various authenticated users, from simple subscribers/students to teachers and above. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/83c9c3af-9eca-45e0-90d7-edc69e616e6a
CVE ID: CVE-2021-24576 State: PUBLISHED Published: 2021-10-11T10:45:31 Last Updated: 2024-08-03T19:35:20.206Z Vendors: Unknown Products: Easy Accordion – Best Accordion FAQ Plugin for WordPress Problem Types: CWE-79 Description: The Easy Accordion WordPress plugin before 2.0.22 does not properly sanitize inputs when adding new items to an accordion. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/4d0c60d1-db5a-4c4f-9bdb-669975ac7210
CVE ID: CVE-2021-24577 State: PUBLISHED Published: 2021-10-11T10:45:33 Last Updated: 2024-08-03T19:35:20.255Z Vendors: Unknown Products: Coming soon and Maintenance mode Problem Types: CWE-79 Description: The Coming soon and Maintenance mode WordPress plugin before 3.5.3 does not properly sanitize inputs submitted by authenticated users when setting adding or modifying coming soon or maintenance mode pages, leading to stored XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/d453b547-41a8-4a6b-8349-8686b7054805
CVE ID: CVE-2021-24578 State: PUBLISHED Published: 2021-12-21T08:45:25 Last Updated: 2024-08-03T19:35:20.197Z Vendors: Unknown Products: SportsPress – Sports Club & League Manager Problem Types: CWE-79 Description: The SportsPress WordPress plugin before 2.7.9 does not sanitise and escape its match_day parameter before outputting back in the Events backend page, leading to a Reflected Cross-Site Scripting issue Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/69351798-c790-42d4-9485-1813cd325769
CVE ID: CVE-2021-24579 State: PUBLISHED Published: 2021-08-30T14:11:21 Last Updated: 2024-08-03T19:35:20.209Z Vendors: Unknown Products: Bold Page Builder Problem Types: CWE-502 Description: The bt_bb_get_grid AJAX action of the Bold Page Builder WordPress plugin before 3.1.6 passes user input into the unserialize() function without any validation or sanitisation, which could lead to a PHP Object Injection. Even though the plugin did not contain a suitable gadget to fully exploit the issue, other installed plugins on the blog could allow such issue to be exploited and lead to RCE in some cases. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/
to RCE in some cases. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/08edce3f-2746-4886-8439-76e44ec76fa8
CVE ID: CVE-2021-24580 State: PUBLISHED Published: 2021-08-30T14:11:22 Last Updated: 2024-08-03T19:35:20.253Z Vendors: Unknown Products: Side Menu Lite - add sticky fixed buttons Problem Types: CWE-89 Description: The Side Menu Lite WordPress plugin before 2.2.6 does not sanitise user input from the List page in the admin dashboard before using it in SQL statement, leading to a SQL Injection issue Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/2faccd1b-4b1c-4b3e-b917-de2d05e860f8
CVE ID: CVE-2021-24581 State: PUBLISHED Published: 2021-08-30T14:11:23 Last Updated: 2024-08-03T19:35:20.193Z Vendors: Unknown Products: Blue Admin Problem Types: CWE-352, CWE-79 Description: The Blue Admin WordPress plugin through 21.06.01 does not sanitise or escape its "Logo Title" setting before outputting in a page, leading to a Stored Cross-Site Scripting issue. Furthermore, the plugin does not have CSRF check in place when saving its settings, allowing the issue to be exploited via a CSRF attack. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/75abd073-b45f-4fe6-8501-7a6d0163f78d
CVE ID: CVE-2021-24582 State: PUBLISHED Published: 2021-09-20T10:06:18 Last Updated: 2024-08-03T19:35:20.254Z Vendors: Unknown Products: ThinkTwit Problem Types: CWE-79 Description: The ThinkTwit WordPress plugin before 1.7.1 did not sanitise or escape its "Consumer key" setting before outputting it its settings page, leading to a Stored Cross-Site Scripting issue. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/5a5293ed-ddcb-4a63-9420-09942e7d69c2
CVE ID: CVE-2021-24583 State: PUBLISHED Published: 2021-09-20T10:06:20 Last Updated: 2024-08-03T19:35:20.182Z Vendors: Unknown Products: Timetable and Event Schedule by MotoPress Problem Types: CWE-284 Description: The Timetable and Event Schedule WordPress plugin before 2.4.2 does not have proper access control when deleting a timeslot, allowing any user with the edit_posts capability (contributor+) to delete arbitrary timeslot from any events. Furthermore, no CSRF check is in place as well, allowing such attack to be performed via CSRF against a logged in with such capability Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/7aec4ef4-db3b-41f
lity Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/7aec4ef4-db3b-41fb-9177-88ce9d37bca6
CVE ID: CVE-2021-24584 State: PUBLISHED Published: 2021-09-20T10:06:21 Last Updated: 2024-08-03T19:35:20.210Z Vendors: Unknown Products: Timetable and Event Schedule by MotoPress Problem Types: CWE-352, CWE-79 Description: The Timetable and Event Schedule WordPress plugin before 2.4.2 does not have proper access control when updating a timeslot, allowing any user with the edit_posts capability (contributor+) to update arbitrary timeslot from any events. Furthermore, no CSRF check is in place as well, allowing such attack to be perform via CSRF against a logged in with such capability. In versions before 2.3.19, the lack of sanitisation and escaping in some of the fields, like the descritptio
capability. In versions before 2.3.19, the lack of sanitisation and escaping in some of the fields, like the descritption could also lead to Stored XSS issues Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/60eadf75-8298-49de-877e-ce103fc34d58
CVE ID: CVE-2021-24585 State: PUBLISHED Published: 2021-09-20T10:06:23 Last Updated: 2024-08-03T19:35:20.312Z Vendors: Unknown Products: Timetable and Event Schedule by MotoPress Problem Types: CWE-200 Description: The Timetable and Event Schedule WordPress plugin before 2.4.0 outputs the Hashed Password, Username and Email Address (along other less sensitive data) of the user related to the Even Head of the Timeslot in the response when requesting the event Timeslot data with a user with the edit_posts capability. Combined with the other Unauthorised Event Timeslot Modification issue (https://wpscan.com/reports/submissions/4699/) where an arbitrary user ID can be set, this could allow low p
ation issue (https://wpscan.com/reports/submissions/4699/) where an arbitrary user ID can be set, this could allow low privilege users with the edit_posts capability (such as author) to retrieve sensitive User data by iterating over the user_id Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/cd288a92-903b-47c9-83ac-8e5b677e949b
CVE ID: CVE-2021-24586 State: PUBLISHED Published: 2021-09-13T17:56:27 Last Updated: 2024-08-03T19:35:20.192Z Vendors: Unknown Products: Per page add to head Problem Types: CWE-352, CWE-79 Description: The Per page add to head WordPress plugin before 1.4.4 is lacking any CSRF check when saving its settings, which could allow attackers to make a logged in admin change them. Furthermore, as the plugin allows arbitrary HTML to be inserted in one of the setting (feature mentioned by the plugin), this could lead to Stored XSS issue which will be triggered either in the backend, frontend or both depending on the payload used. Additional Analyst Notes: - CVE Program Container: References: - https:/
frontend or both depending on the payload used. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/e9885fba-0e73-41a0-9e1d-47badc09be85
CVE ID: CVE-2021-24587 State: PUBLISHED Published: 2021-09-20T10:06:24 Last Updated: 2024-08-03T19:35:20.318Z Vendors: Unknown Products: Splash Header Problem Types: CWE-79 Description: The Splash Header WordPress plugin before 1.20.8 doesn't sanitise and escape some of its settings while outputting them in the admin dashboard, leading to an authenticated Stored Cross-Site Scripting issue. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/bb5d94ad-e1ce-44e2-8403-d73fe75a146a
CVE ID: CVE-2021-24588 State: PUBLISHED Published: 2021-09-06T11:09:28 Last Updated: 2024-08-03T19:35:20.254Z Vendors: Unknown Products: SMS Alert Order Notifications – WooCommerce Problem Types: CWE-79 Description: The SMS Alert Order Notifications WordPress plugin before 3.4.7 is affected by a cross site scripting (XSS) vulnerability in the plugin's setting page. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/dc2ce546-9da1-442c-8ee2-cd660634501f
CVE ID: CVE-2021-24590 State: PUBLISHED Published: 2021-09-06T11:09:29 Last Updated: 2024-08-03T19:35:20.251Z Vendors: Unknown Products: Cookie Notice & Consent Banner for GDPR & CCPA Compliance Problem Types: CWE-79 Description: The Cookie Notice & Consent Banner for GDPR & CCPA Compliance WordPress plugin before 1.7.2 does not properly sanitize inputs to prevent injection of arbitrary HTML within the plugin's design customization options. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/d6846774-1958-4c8d-bb64-af0d8c46e6e7
CVE ID: CVE-2021-24591 State: PUBLISHED Published: 2021-09-06T11:09:30 Last Updated: 2024-08-03T19:35:20.273Z Vendors: Unknown Products: Highlight Problem Types: CWE-79 Description: The Highlight WordPress plugin before 0.9.3 does not sanitise its CustomCSS setting, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/c5cbe3b4-2829-4fd2-8194-4b3a2ae0e257
CVE ID: CVE-2021-24592 State: PUBLISHED Published: 2021-08-30T14:11:24 Last Updated: 2024-08-03T19:35:20.145Z Vendors: Unknown Products: Sitewide Notice WP Problem Types: CWE-79 Description: The Sitewide Notice WP WordPress plugin before 2.3 does not sanitise some of its settings before outputting them in frontend pages, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/9579ff13-9597-4a77-8cb9-997e35265d22
CVE ID: CVE-2021-24593 State: PUBLISHED Published: 2021-08-30T14:11:25 Last Updated: 2024-08-03T19:35:20.196Z Vendors: Unknown Products: Business Hours Indicator Problem Types: CWE-79 Description: The Business Hours Indicator WordPress plugin before 2.3.5 does not sanitise or escape its 'Now closed message" setting when outputting it in the backend and frontend, leading to an Authenticated Stored Cross-Site Scripting issue Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/309296d4-c397-4fc7-85fb-a28b5b5b6a8d
CVE ID: CVE-2021-24594 State: PUBLISHED Published: 2021-11-08T17:34:45 Last Updated: 2024-08-03T19:35:20.271Z Vendors: Unknown Products: Translate WordPress – Google Language Translator Problem Types: CWE-79 Description: The Translate WordPress – Google Language Translator WordPress plugin before 6.0.12 does not sanitise and escape some of its settings before outputting it in various pages, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/cf7b0f07-8b9b-40a1-ba7b-e8d34f515a6b - https://plugins.trac.wordpress.org/changese
s: - https://wpscan.com/vulnerability/cf7b0f07-8b9b-40a1-ba7b-e8d34f515a6b - https://plugins.trac.wordpress.org/changeset/2607480/
CVE ID: CVE-2021-24595 State: PUBLISHED Published: 2021-10-18T13:45:44 Last Updated: 2024-08-03T19:35:20.227Z Vendors: Unknown Products: Wp Cookie Choice Problem Types: CWE-352, CWE-79 Description: The Wp Cookie Choice WordPress plugin through 1.1.0 is lacking any CSRF check when saving its options, and do not escape them when outputting them in attributes. As a result, an attacker could make a logged in admin change them to arbitrary values including XSS payloads via a CSRF attack. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/c809bdb3-d820-4ce1-9cbc-e41985fb5052
CVE ID: CVE-2021-24596 State: PUBLISHED Published: 2021-09-20T10:06:26 Last Updated: 2024-08-03T19:35:20.237Z Vendors: Unknown Products: youForms for WordPress – Creating Forms for CopeCart Problem Types: CWE-79 Description: The youForms for WordPress plugin through 1.0.5 does not sanitise escape the Button Text field of its Templates, allowing high privilege users (editors and admins) to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/b5def0e7-2b4a-43e0-8175-28b28aa2f8ae
CVE ID: CVE-2021-24597 State: PUBLISHED Published: 2021-09-20T10:06:28 Last Updated: 2024-08-03T19:35:20.208Z Vendors: Unknown Products: 有赏 You Shang Problem Types: CWE-79 Description: The You Shang WordPress plugin through 1.0.1 does not escape its qrcode links settings, which result into Stored Cross-Site Scripting issues in frontend posts and the plugins settings page depending on the payload used Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/37554d0e-68e2-4df9-8c59-65f5cd7f184e
CVE ID: CVE-2021-24598 State: PUBLISHED Published: 2021-11-17T10:15:32 Last Updated: 2024-08-03T19:35:20.152Z Vendors: Unknown Products: Testimonial Problem Types: CWE-79 Description: The Testimonial WordPress plugin before 1.6.0 does not escape some testimonial fields which could allow high privilege users to perform Cross Site Scripting attacks even when the unfiltered_html capability is disallowed Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/365c09a7-0b10-4145-a415-5c0e9f429ae0 - https://plugins.trac.wordpress.org/changeset/2606523/
CVE ID: CVE-2021-24599 State: PUBLISHED Published: 2021-09-06T11:09:31 Last Updated: 2024-08-03T19:35:20.312Z Vendors: Unknown Products: Email Encoder – Protect Email Addresses Problem Types: CWE-79 Description: The Email Encoder – Protect Email Addresses WordPress plugin before 2.1.2 has an endpoint that requires no authentication and will render a user supplied value in the HTML response without escaping or sanitizing the data. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/625a272f-5c69-4f6a-8eee-32f70cd4a558
CVE ID: CVE-2021-24600 State: PUBLISHED Published: 2021-09-20T10:06:29 Last Updated: 2024-08-03T19:35:20.289Z Vendors: Unknown Products: WP Dialog Problem Types: CWE-79 Description: The WP Dialog WordPress plugin through 1.2.5.5 does not sanitise and escape some of its settings before outputting them in pages, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/413b3a2e-1c05-45ec-b00f-1c137a1ae33e
CVE ID: CVE-2021-24601 State: PUBLISHED Published: 2021-09-06T11:09:32 Last Updated: 2024-08-03T19:35:20.227Z Vendors: Unknown Products: WPFront Notification Bar Problem Types: CWE-79 Description: The WPFront Notification Bar WordPress plugin before 2.1.0.08087 does not properly sanitise and escape its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/bb437706-a918-4d66-b027-b083ab486074
CVE ID: CVE-2021-24602 State: PUBLISHED Published: 2021-08-23T11:10:19 Last Updated: 2024-08-03T19:35:20.273Z Vendors: Unknown Products: HM Multiple Roles Problem Types: CWE-269 Description: The HM Multiple Roles WordPress plugin before 1.3 does not have any access control to prevent low privilege users to set themselves as admin via their profile page Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/5fd2548a-08de-4417-bff1-f174dab718d5 - https://jetpack.com/2021/08/05/privilege-escalation-in-hm-multiple-roles-wordpress-plugin/
CVE ID: CVE-2021-24603 State: PUBLISHED Published: 2021-09-06T11:09:33 Last Updated: 2024-08-03T19:35:20.266Z Vendors: Unknown Products: Site Reviews Problem Types: CWE-79 Description: The Site Reviews WordPress plugin before 5.13.1 does not sanitise some of its Review Details when adding a review as an admin, which could allow them to perform Cross-Site Scripting attacks when the unfiltered_html is disallowed Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/72aea0e5-1fa7-4827-a173-59982202d323
CVE ID: CVE-2021-24604 State: PUBLISHED Published: 2021-09-20T10:06:31 Last Updated: 2024-08-03T19:35:20.314Z Vendors: Unknown Products: Availability Calendar Problem Types: CWE-79 Description: The Availability Calendar WordPress plugin before 1.2.2 does not sanitise or escape its Category Names before outputting them in page/post where the associated shortcode is embed, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/d084c5b1-45f1-4e7e-b3e9-3c98ae4bce9c
CVE ID: CVE-2021-24605 State: PUBLISHED Published: 2021-09-13T17:56:28 Last Updated: 2024-08-03T19:35:20.239Z Vendors: Unknown Products: Custom Post View Generator Problem Types: CWE-79 Description: The create_post_page AJAX action of the Custom Post View Generator WordPress plugin through 0.4.6 (available to authenticated user) does not sanitise or escape user input before outputting it back in the response, leading to a Reflected Cross-Site issue Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/e0be384c-3e63-49f6-b2ab-3024dcd88686
CVE ID: CVE-2021-24606 State: PUBLISHED Published: 2021-09-20T10:06:32 Last Updated: 2024-08-03T19:35:20.276Z Vendors: Unknown Products: Availability Calendar Problem Types: CWE-89 Description: The Availability Calendar WordPress plugin before 1.2.1 does not escape the category attribute from its shortcode before using it in a SQL statement, leading to a SQL Injection issue, which can be exploited by any user able to add shortcode to posts/pages, such as contributor+ Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/fe49f48a-f97a-44fe-8d71-be08e7ce4f83
CVE ID: CVE-2021-24607 State: PUBLISHED Published: 2021-11-08T17:34:46 Last Updated: 2024-08-03T19:35:20.210Z Vendors: Unknown Products: Storefront Footer Text Problem Types: CWE-79 Description: The Storefront Footer Text WordPress plugin through 1.0.1 does not sanitize and escape the "Footer Credit Text" added to pages, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered-html capability is disallowed. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/efa7d91a-447b-4fd8-aa21-5364b177fee9
CVE ID: CVE-2021-24608 State: PUBLISHED Published: 2021-10-25T13:20:45 Last Updated: 2024-08-03T19:35:20.214Z Vendors: Unknown Products: Formidable Form Builder – Contact Form, Survey & Quiz Forms Plugin for WordPress Problem Types: CWE-79 Description: The Formidable Form Builder – Contact Form, Survey & Quiz Forms Plugin for WordPress plugin before 5.0.07 does not sanitise and escape its Form's Labels, allowing high privileged users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/75305ea8-730b-4caf-a3c6-cb94adee683c - https://plugins.trac.wordpress
er: References: - https://wpscan.com/vulnerability/75305ea8-730b-4caf-a3c6-cb94adee683c - https://plugins.trac.wordpress.org/changeset/2609911
CVE ID: CVE-2021-24609 State: PUBLISHED Published: 2021-09-20T10:06:34 Last Updated: 2024-08-03T19:35:20.211Z Vendors: Unknown Products: WP Mapa Politico España Problem Types: CWE-79 Description: The WP Mapa Politico Espana WordPress plugin before 3.7.0 does not sanitise or escape some of its settings before outputting them in attributes, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/8b639743-3eb5-4f74-a156-76cb657bbe05
CVE ID: CVE-2021-24610 State: PUBLISHED Published: 2021-09-27T15:25:23 Last Updated: 2024-08-03T19:35:20.256Z Vendors: Unknown Products: Translate Multilingual sites – TranslatePress Problem Types: CWE-79 Description: The TranslatePress WordPress plugin before 2.0.9 does not implement a proper sanitisation on the translated strings. The 'trp_sanitize_string' function only removes script tag with a regex, still allowing other HTML tags and attributes to execute javascript, which could lead to authenticated Stored Cross-Site Scripting issues. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/b87fcc2f-c2eb-4e23-9757-d1c590f26d3f - http://packetsto
rogram Container: References: - https://wpscan.com/vulnerability/b87fcc2f-c2eb-4e23-9757-d1c590f26d3f - http://packetstormsecurity.com/files/164306/WordPress-TranslatePress-2.0.8-Cross-Site-Scripting.html