National Vulnerability Database

National Vulnerability Database

National Vulnerability
Database

Search Results (Refine Search)

Search Parameters:
  • Results Type: Overview
  • Search Type: Search All
  • Keyword (text search): wordpress
There are 2,455 matching records.
Displaying matches 1741 through 1760.
Vuln ID Summary CVSS Severity
CVE-2014-4578

Cross-site scripting (XSS) vulnerability in asset-studio/icons-launcher.php in the WP App Maker plugin 1.0.16.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the uid parameter.

Published: July 02, 2014; 02:55:09 PM -04:00
    V2: 4.3 MEDIUM
CVE-2014-4576

Cross-site scripting (XSS) vulnerability in services/diagnostics.php in the WordPress Social Login plugin 2.0.3 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the xhrurl parameter.

Published: July 02, 2014; 02:55:09 PM -04:00
    V2: 4.3 MEDIUM
CVE-2014-4574

Cross-site scripting (XSS) vulnerability in resize.php in the WebEngage plugin before 2.0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the height parameter.

Published: July 02, 2014; 02:55:09 PM -04:00
    V2: 4.3 MEDIUM
CVE-2014-4573

Multiple cross-site scripting (XSS) vulnerabilities in frame-maker.php in the Walk Score plugin 0.5.5 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) s or (2) o parameter.

Published: July 02, 2014; 02:55:09 PM -04:00
    V2: 4.3 MEDIUM
CVE-2014-4572

Cross-site scripting (XSS) vulnerability in bvc.php in the Votecount for Balatarin plugin 0.1.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the (1) url or (2) bvcurl parameter.

Published: July 02, 2014; 02:55:09 PM -04:00
    V2: 4.3 MEDIUM
CVE-2014-4570

Multiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Video Presentation plugin before 3.31 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) room_name parameter to c_login.php or (2) room parameter to index.php in vp/.

Published: July 02, 2014; 02:55:09 PM -04:00
    V2: 4.3 MEDIUM
CVE-2014-4568

Cross-site scripting (XSS) vulnerability in posts/videowhisper/r_logout.php in the Video Posts Webcam Recorder plugin 1.55.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the message parameter.

Published: July 02, 2014; 02:55:09 PM -04:00
    V2: 4.3 MEDIUM
CVE-2014-4566

Cross-site scripting (XSS) vulnerability in res/fake_twitter/frame.php in the "verwei.se - WordPress - Twitter" (verweise-wordpress-twitter) plugin 1.0.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the base parameter.

Published: July 02, 2014; 02:55:09 PM -04:00
    V2: 4.3 MEDIUM
CVE-2014-4560

Cross-site scripting (XSS) vulnerability in includes/getTipo.php in the ToolPage plugin 1.6.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the t parameter.

Published: July 02, 2014; 02:55:09 PM -04:00
    V2: 4.3 MEDIUM
CVE-2014-4557

Cross-site scripting (XSS) vulnerability in test-plugin.php in the Swipe Checkout for Jigoshop (swipe-hq-checkout-for-jigoshop) plugin 3.1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the api_url parameter.

Published: July 02, 2014; 02:55:09 PM -04:00
    V2: 4.3 MEDIUM
CVE-2014-4552

Cross-site scripting (XSS) vulnerability in library/includes/payment/paypalexpress/DoDirectPayment.php in the Spotlight (spotlightyour) plugin 4.7 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the paymentType parameter.

Published: July 02, 2014; 02:55:09 PM -04:00
    V2: 4.3 MEDIUM
CVE-2014-4551

Cross-site scripting (XSS) vulnerability in diagnostics/test.php in the Social Connect plugin 1.0.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the testing parameter.

Published: July 02, 2014; 02:55:09 PM -04:00
    V2: 4.3 MEDIUM
CVE-2014-4547

Multiple cross-site scripting (XSS) vulnerabilities in templates/default/index_ajax.php in the Rezgo Online Booking plugin before 1.8.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) tags or (2) search_for parameter.

Published: July 02, 2014; 02:55:09 PM -04:00
    V2: 4.3 MEDIUM
CVE-2014-4543

Multiple cross-site scripting (XSS) vulnerabilities in payper/payper.php in the Pay Per Media Player plugin 1.24 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) fcolor, (2) links, (3) stitle, (4) height, (5) width, (6) host, (7) bcolor, (8) msg, (9) id, or (10) size parameter.

Published: July 02, 2014; 02:55:09 PM -04:00
    V2: 4.3 MEDIUM
CVE-2014-4542

Cross-site scripting (XSS) vulnerability in redirect.php in the Ooorl plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the url parameter.

Published: July 02, 2014; 02:55:09 PM -04:00
    V2: 4.3 MEDIUM
CVE-2014-4541

Cross-site scripting (XSS) vulnerability in shortcode-generator/preview-shortcode-external.php in the OMFG Mobile Pro plugin 1.1.26 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the shortcode parameter.

Published: July 02, 2014; 02:55:08 PM -04:00
    V2: 4.3 MEDIUM
CVE-2014-4540

Cross-site scripting (XSS) vulnerability in oleggo-twitter/twitter_login_form.php in the Oleggo LiveStream plugin 0.2.6 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the msg parameter.

Published: July 02, 2014; 02:55:08 PM -04:00
    V2: 4.3 MEDIUM
CVE-2014-4537

Cross-site scripting (XSS) vulnerability in inpage.tpl.php in the Keyword Strategy Internal Links plugin 2.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the (1) sort, (2) search, or (3) dir parameter.

Published: July 02, 2014; 02:55:08 PM -04:00
    V2: 4.3 MEDIUM
CVE-2014-4532

Cross-site scripting (XSS) vulnerability in templates/printAdminUsersList_Footer.tpl.php in the GarageSale plugin before 1.2.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter.

Published: July 02, 2014; 02:55:08 PM -04:00
    V2: 4.3 MEDIUM
CVE-2014-4531

Cross-site scripting (XSS) vulnerability in main_page.php in the Game tabs plugin 0.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the n parameter.

Published: July 02, 2014; 02:55:08 PM -04:00
    V2: 4.3 MEDIUM