Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-4541 State: PUBLISHED Published: 2014-07-02T18:00:00 Last Updated: 2024-08-06T11:20:26.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in shortcode-generator/preview-shortcode-external.php in the OMFG Mobile Pro plugin 1.1.26 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the shortcode parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-omfg-mobile-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4542 State: PUBLISHED Published: 2014-07-02T18:00:00 Last Updated: 2024-08-06T11:20:26.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in redirect.php in the Ooorl plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-ooorl-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4543 State: PUBLISHED Published: 2014-07-02T18:00:00 Last Updated: 2024-08-06T11:20:26.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in payper/payper.php in the Pay Per Media Player plugin 1.24 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) fcolor, (2) links, (3) stitle, (4) height, (5) width, (6) host, (7) bcolor, (8) msg, (9) id, or (10) size parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68447 - http://codevigilant.com/disclosure/wp-plugin-pay-per-media-player-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4544 State: PUBLISHED Published: 2019-12-27T18:53:34 Last Updated: 2024-08-06T11:20:26.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Podcast Channels plugin 0.20 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the Filename parameter to getid3/demos/demo.write.php. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-podcast-channels-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4545 State: PUBLISHED Published: 2014-07-01T14:00:00 Last Updated: 2024-08-06T11:20:26.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in pq_dialog.php in the Pro Quoter plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) leftorright or (2) author parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68318 - http://codevigilant.com/disclosure/wp-plugin-proquoter-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4546 State: PUBLISHED Published: 2014-07-02T20:00:00 Last Updated: 2024-08-06T11:20:26.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in book_ajax.php in the Rezgo plugin 1.4.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the response parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-rezgo-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4547 State: PUBLISHED Published: 2014-07-02T18:00:00 Last Updated: 2024-08-06T11:20:26.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in templates/default/index_ajax.php in the Rezgo Online Booking plugin before 1.8.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) tags or (2) search_for parameter. Additional Analyst Notes: - CVE Program Container: References: - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=848542%40rezgo-online-booking&old=748531%40rezgo-online-booking&sfp_email=&sfph_mail=#file500 - http://codevigilant.com/disclosu
0rezgo-online-booking&old=748531%40rezgo-online-booking&sfp_email=&sfph_mail=#file500 - http://codevigilant.com/disclosure/wp-plugin-rezgo-online-booking-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4548 State: PUBLISHED Published: 2019-12-27T18:55:17 Last Updated: 2024-08-06T11:20:26.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in tinymce/popup.php in the Ruven Toolkit plugin 1.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the popup parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-ruven-toolkit-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4549 State: PUBLISHED Published: 2014-07-02T20:00:00 Last Updated: 2024-08-06T11:20:26.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in pages/3DComplete.php in the WooCommerce SagePay Direct Payment Gateway plugin before 0.1.6.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) MD or (2) PARes parameter. Additional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/plugins/sagepay-direct-for-woocommerce-payment-gateway/changelog - http://codevigilant.com/disclosure/wp-plugin-sagepay-direct-for-woocommerce-payment-gateway-a3-cross-site-scripting-
g - http://codevigilant.com/disclosure/wp-plugin-sagepay-direct-for-woocommerce-payment-gateway-a3-cross-site-scripting-xss - http://www.securityfocus.com/bid/65355 - https://github.com/wp-plugins/sagepay-direct-for-woocommerce-payment-gateway/commit/9c6cf939c6c25377c285439b92ef2bb5ebda9db6
CVE ID: CVE-2014-4550 State: PUBLISHED Published: 2019-12-27T19:34:22 Last Updated: 2024-08-06T11:20:26.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in preview-shortcode-external.php in the Shortcode Ninja plugin 1.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the shortcode parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-shortcode-ninja-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4551 State: PUBLISHED Published: 2014-07-02T18:00:00 Last Updated: 2024-08-06T11:20:26.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in diagnostics/test.php in the Social Connect plugin 1.0.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the testing parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-social-connect-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4552 State: PUBLISHED Published: 2014-07-02T18:00:00 Last Updated: 2024-08-06T11:20:26.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in library/includes/payment/paypalexpress/DoDirectPayment.php in the Spotlight (spotlightyour) plugin 4.7 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the paymentType parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-spotlightyour-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4553 State: PUBLISHED Published: 2020-01-02T18:33:08 Last Updated: 2024-08-06T11:20:26.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site Scripting (XSS) in the spreadshirt-rss-3d-cube-flash-gallery plugin 2014 for WordPress allows remote attackers to execute arbitrary web script or HTML via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-spreadshirt-rss-3d-cube-flash-gallery-a3-cross-site-scripting-xss/
CVE ID: CVE-2014-4554 State: PUBLISHED Published: 2014-07-02T20:00:00 Last Updated: 2024-08-06T11:20:26.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in templates/download.php in the SS Downloads plugin before 1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the title parameter. Additional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/plugins/ss-downloads/changelog - http://codevigilant.com/disclosure/wp-plugin-ss-downloads-a3-cross-site-scripting-xss - http://www.securityfocus.com/bid/65141
CVE ID: CVE-2014-4555 State: PUBLISHED Published: 2014-07-02T20:00:00 Last Updated: 2024-08-06T11:20:26.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in fonts/font-form.php in the Style It plugin 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the mode parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-style-it-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4556 State: PUBLISHED Published: 2014-07-01T14:00:00 Last Updated: 2024-08-06T11:20:26.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in test-plugin.php in the Swipe Checkout for eShop plugin 3.7.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the api_url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-swipe-hq-checkout-for-eshop-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4557 State: PUBLISHED Published: 2014-07-02T18:00:00 Last Updated: 2024-08-06T11:20:26.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in test-plugin.php in the Swipe Checkout for Jigoshop (swipe-hq-checkout-for-jigoshop) plugin 3.1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the api_url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-swipe-hq-checkout-for-jigoshop-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4558 State: PUBLISHED Published: 2019-12-27T18:56:55 Last Updated: 2024-08-06T11:20:26.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in test-plugin.php in the Swipe Checkout for WooCommerce plugin 2.7.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the api_url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-swipehq-payment-gateway-woocommerce-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4559 State: PUBLISHED Published: 2019-12-27T13:56:25 Last Updated: 2024-08-06T11:20:26.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in test-plugin.php in the Swipe Checkout for WP e-Commerce plugin 3.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) api_key, (2) payment_page_url, (3) merchant_id, (4) api_url, or (5) currency parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-swipehq-payment-gateway-wp-e-commerce-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4560 State: PUBLISHED Published: 2014-07-02T18:00:00 Last Updated: 2024-08-06T11:20:26.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in includes/getTipo.php in the ToolPage plugin 1.6.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the t parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-toolpage-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4561 State: PUBLISHED Published: 2020-01-10T13:02:15 Last Updated: 2024-08-06T11:20:26.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ultimate-weather plugin 1.0 for WordPress has XSS Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-ultimate-weather-plugin-a3-cross-site-scripting-xss/
CVE ID: CVE-2014-4563 State: PUBLISHED Published: 2014-07-02T20:00:00 Last Updated: 2024-08-06T11:20:26.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in go.php in the URL Cloak & Encrypt (url-cloak-encrypt) plugin 2.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-url-cloak-encrypt-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4564 State: PUBLISHED Published: 2014-07-01T14:00:00 Last Updated: 2024-08-06T11:20:26.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in check.php in the Validated plugin 1.0.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the slug parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-validated-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4565 State: PUBLISHED Published: 2014-07-02T20:00:00 Last Updated: 2024-08-06T11:20:26.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in vcc.js.php in the Verification Code for Comments plugin 2.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) vp, (2) vs, (3) l, (4) vu, or (5) vm parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-verification-code-for-comments-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4566 State: PUBLISHED Published: 2014-07-02T18:00:00 Last Updated: 2024-08-06T11:20:26.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in res/fake_twitter/frame.php in the "verwei.se - WordPress - Twitter" (verweise-wordpress-twitter) plugin 1.0.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the base parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-verweise-wordpress-twitter-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4567 State: PUBLISHED Published: 2019-12-27T18:45:44 Last Updated: 2024-08-06T11:20:26.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in comments/videowhisper2/r_logout.php in the Video Comments Webcam Recorder plugin 1.55, as downloaded before 20140116 for WordPress allows remote attackers to inject arbitrary web script or HTML via the message parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-video-comments-webcam-recorder-a3-cross-site-scripting-xss - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=839986%40video-
ss-site-scripting-xss - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=839986%40video-comments-webcam-recorder&old=686438%40video-comments-webcam-recorder
CVE ID: CVE-2014-4568 State: PUBLISHED Published: 2014-07-02T18:00:00 Last Updated: 2024-08-06T11:20:26.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in posts/videowhisper/r_logout.php in the Video Posts Webcam Recorder plugin 1.55.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the message parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-video-posts-webcam-recorder-a3-cross-site-scripting-xss - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=839990%40video-posts-webcam-recorder&old=6
ps://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=839990%40video-posts-webcam-recorder&old=686450%40video-posts-webcam-recorder&sfp_email=&sfph_mail=
CVE ID: CVE-2014-4569 State: PUBLISHED Published: 2014-07-01T14:00:00 Last Updated: 2024-08-06T11:20:26.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ls/vv_login.php in the VideoWhisper Live Streaming Integration plugin 4.27.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the room_name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=833654%40videowhisper-live-streaming-integration&old=833649%40videowhisper-live-streaming-integration&sfp_email=&sfph_mail= - http://codevigilant.c
streaming-integration&old=833649%40videowhisper-live-streaming-integration&sfp_email=&sfph_mail= - http://codevigilant.com/disclosure/wp-plugin-videowhisper-live-streaming-integration-a3-cross-site-scripting-xss - http://www.securityfocus.com/bid/68321
CVE ID: CVE-2014-4570 State: PUBLISHED Published: 2014-07-02T18:00:00 Last Updated: 2024-08-06T11:20:26.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Video Presentation plugin before 3.31 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) room_name parameter to c_login.php or (2) room parameter to index.php in vp/. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-videowhisper-video-presentation-a3-cross-site-scripting-xss - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=839
ation-a3-cross-site-scripting-xss - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=839980%40videowhisper-video-presentation&old=600781%40videowhisper-video-presentation&sfp_email=&sfph_mail=#file4 - http://www.securityfocus.com/bid/69511
CVE ID: CVE-2014-4571 State: PUBLISHED Published: 2014-07-02T20:00:00 Last Updated: 2024-08-06T11:20:26.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in vncal.js.php in the VN-Calendar plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) fs or (2) w parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68359 - http://codevigilant.com/disclosure/wp-plugin-vn-calendar-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4572 State: PUBLISHED Published: 2014-07-02T18:00:00 Last Updated: 2024-08-06T11:20:26.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in bvc.php in the Votecount for Balatarin plugin 0.1.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the (1) url or (2) bvcurl parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-votecount-for-balatarin-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4573 State: PUBLISHED Published: 2014-07-02T18:00:00 Last Updated: 2024-08-06T11:20:26.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in frame-maker.php in the Walk Score plugin 0.5.5 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) s or (2) o parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-walk-score-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4574 State: PUBLISHED Published: 2014-07-02T18:00:00 Last Updated: 2024-08-06T11:20:26.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in resize.php in the WebEngage plugin before 2.0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the height parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-webengage-a3-cross-site-scripting-xss - http://wordpress.org/plugins/webengage/changelog - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=844373%40webengage&old=788585%40webengage&sfp_email=&sf
trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=844373%40webengage&old=788585%40webengage&sfp_email=&sfph_mail=
CVE ID: CVE-2014-4575 State: PUBLISHED Published: 2014-07-01T14:00:00 Last Updated: 2024-08-06T11:20:26.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in js/window.php in the Wikipop plugin 2.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-wikipop-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4576 State: PUBLISHED Published: 2014-07-02T18:00:00 Last Updated: 2024-08-06T11:20:26.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in services/diagnostics.php in the WordPress Social Login plugin 2.0.3 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the xhrurl parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-wordpress-social-login-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4577 State: PUBLISHED Published: 2014-10-21T15:00:00 Last Updated: 2024-08-06T11:20:26.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in reviews.php in the WP AmASIN - The Amazon Affiliate Shop plugin 0.9.6 and earlier for WordPress allows remote attackers to read arbitrary files via a full pathname in the url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-wp-amasin-the-amazon-affiliate-shop-local-file-inclusion - http://plugins.svn.wordpress.org/wp-amasin-the-amazon-affiliate-shop/trunk/readme.txt
CVE ID: CVE-2014-4578 State: PUBLISHED Published: 2014-07-02T18:00:00 Last Updated: 2024-08-06T11:20:26.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in asset-studio/icons-launcher.php in the WP App Maker plugin 1.0.16.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the uid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-wp-app-maker-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4579 State: PUBLISHED Published: 2014-07-02T18:00:00 Last Updated: 2024-08-06T11:20:26.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in js/test.php in the Appointments Scheduler plugin 1.5 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the lang parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-wp-appointments-schedules-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4580 State: PUBLISHED Published: 2014-07-02T18:00:00 Last Updated: 2024-08-06T11:20:26.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in blipbot.ajax.php in the WP BlipBot plugin 3.0.9 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the BlipBotID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-wp-blipbot-a3-cross-site-scripting-xss