Wordfence Intelligence

Title	CVE ID	CVSS	Vector	Date
GD Star Rating < 1.9.17 - Cross-Site Scripting		6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	May 15, 2012
Network Publisher <= 5.0.1 - Cross-Site Scripting		6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	May 15, 2012
Track That Stat < 1.1.0 - Cross-Site Scripting		7.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L	May 15, 2012
Sharebar <= 1.2.1 - Cross-Site Scripting	CVE-2012-6718	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	May 15, 2012
WP Forum Server < 1.7.5 - Cross-Site Scripting	CVE-2012-6623	7.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L	May 15, 2012
Soundcloud Is Gold <= 2.2 - Cross-Site Scripting	CVE-2012-6624	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	May 15, 2012
LeagueManager <= 3.7 - Multiple Cross-Site Scripting	CVE-2012-2912	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	May 15, 2012
WP Statistics <= 2.2.4 - Cross-Site Scripting		6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	May 15, 2012
EZPZ One Click Backup <= 12.03.10 - Cross-Site Scripting		6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	May 15, 2012
Newsletter Manager < 1.0.2 - Cross-Site Scripting	CVE-2012-6628	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	May 15, 2012
WP-FaceThumb < 0.2 - Cross-Site Scripting	CVE-2012-2371	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	May 13, 2012
Custom Contact Forms Plugin <= 5.1.0.2 - Reflected Cross-Site Scripting		6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	May 11, 2012
Better WP Security <= 3.2.4 - Multiple Cross-Site Scripting	CVE-2012-4264	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	May 11, 2012
CataBlog < 1.6.3 - Reflected Cross-Site Scripting		6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	May 11, 2012
Bad Behavior < 2.0.47 & 2.2.0 - 2.2.4 - Cross-Site Scripting	CVE-2012-4271	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	May 11, 2012
2 Click Social Media Buttons <= 0.33 - Multiple Cross-Site Scripting	CVE-2012-4272	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	May 11, 2012
iThemes Security < 3.2.5 - Cross-Site Scripting	CVE-2012-4263	7.2	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N	May 11, 2012
BulletProof Security < .47.1 - Reflected Cross-Site Scripting	CVE-2012-4268	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	May 11, 2012
2 Click Social Media Buttons < 0.34 - Cross-Site Scripting	CVE-2012-4273	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	May 11, 2012
User Photo <= 0.9.5 - Cross-Site Scripting	CVE-2012-2920	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	May 9, 2012

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation

Vulnerabilities protected by our XSS: Cross Site Scripting firewall rule

Showing 6461-6480 of 6,627 Vulnerabilities