Search vulnerabilities

Results 3

Export CSV
CVE-2023-1119

Multiple Plugins - Cross-Site Scripting From Third-party Library

The WP-Optimize WordPress plugin before 3.2.13, SrbTransLatin WordPress plugin before 2.4.1 use a third-party library that removes the escaping on some HTML characters, leading to a cross-site scripting vulnerability.

CVSS 3.1 · 6.1 Medium EPSS 1.2% KEV · Not listed
CVE-2018-5369

The SrbTransLatin plugin 1.46 for WordPress has XSS via an srbtranslatoptions action to wp-admin/options-general.php with a lang_identificator parameter.

CVSS 3.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Products