Wordfence Intelligence

Title	CVE ID	CVSS	Vector	Date
Album and Image Gallery with Lightbox – Flagallery Photo Portfolio < 1.57 - Cross-Site Scripting	CVE-2011-4624	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	November 30, 2011
ZooEffect Plugin for Video player, Photo Gallery Slideshow jQuery and audio / music / podcast – HTML5 <= 1.11 - Reflected Cross-Site Scripting	CVE-2011-5180	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	November 30, 2011
Skysa App Bar Integration < 1.04 - Cross-Site Scripting	CVE-2011-5179	7.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L	November 28, 2011
Featurific For WordPress <= 1.6.2 - Cross-Site Scripting	CVE-2011-5265	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	November 24, 2011
Live Chat from ClickDesk – Live Chat – Help Desk Plugin for Websites <= 2.0 - Cross-Site Scripting	CVE-2011-5181	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	November 23, 2011
WP eCommerce < 3.8.7.2 - Stored Cross-Site Scripting	CVE-2011-5104	5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N	November 21, 2011
Alert Before Your Post <= 0.1.1 - Cross-Site Scripting	CVE-2011-5107	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	November 21, 2011
WP-Cumulus <= 1.22 - Cross-Site Scripting via xmlpath		6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	November 20, 2011
Flexible Custom Post Type < 0.1.7 - Cross-Site Scripting	CVE-2011-5106	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	November 17, 2011
Simple Balance <= 2.2 - Cross-Site Scripting		6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	October 28, 2011
Cover WP <= 1.6.5 - Cross-Site Scripting	CVE-2011-3860	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	October 24, 2011
Classipress <= 3.1.4 - Stored Cross-Site Scripting	CVE-2011-5257	6.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N	October 7, 2011
Atahualpa < 3.6.8 - Cross-Site Scripting	CVE-2011-3850	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	October 4, 2011
Morning Coffee < 3.6 - Cross-Site Scripting	CVE-2011-3862	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	October 4, 2011
Black-Letterhead <= 1.5 - Cross-Site Scripting	CVE-2011-3865	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	September 30, 2011
Elegant Grunge <= 1.0.3 - Cross-Site Scripting	CVE-2011-3856	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	September 29, 2011
Pixiv Custom < 2.1.6 - Cross-Site Scripting	CVE-2011-3858	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	September 29, 2011
The Erudite <= 2.7.8 - Cross-Site Scripting	CVE-2011-3864	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	September 28, 2011
Antisnews <= 1.09 - Cross-Site Scripting	CVE-2011-3857	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	September 27, 2011
Trending < 0.2 - Cross-Site Scripting	CVE-2011-3859	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	September 27, 2011

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation

Vulnerabilities protected by our XSS: Cross Site Scripting firewall rule

Showing 6981-7000 of 7,094 Vulnerabilities