Vulnerabilities protected by our XSS: Cross Site Scripting firewall rule

13,947,179
Attacks Blocked in Past 24 Hours

Showing 7101-7120 of 7,240 Vulnerabilities

Title CVE ID CVSS Vector Date
Modern Footnotes <= 1.4.15 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-28423 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N March 14, 2023
Yandex.News Feed by Teplitsa <= 1.12.5 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-25052 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N March 14, 2023
Auto Rename Media On Upload <= 1.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-0605 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N March 14, 2023
Easy Event calendar <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-28169 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N March 14, 2023
Modern Events Calendar lite < 6.10.5 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2023-1400 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N March 14, 2023
CMS Press <= 0.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-25452 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N March 13, 2023
Klaviyo <= 3.0.7 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-25456 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N March 13, 2023
Solidres <= 0.9.4 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2023-1374 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N March 13, 2023
Easy Forms for Mailchimp <= 6.8.8 - Authenticated (Administrator+) Cross-Site Scripting via Form Name CVE-2023-1323 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N March 9, 2023
Jetpack CRM <= 5.4.4 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-27429 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N March 5, 2023
FareHarbor for WordPress <= 3.6.6 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-25021 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N March 3, 2023
Namaste! LMS <= 2.5.9.9 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'accept_other_payment_methods', 'other_payment_methods' Parameters CVE-2023-0844 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N March 3, 2023
Button Generator – easily Button Builder <= 2.3.3 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-27452 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N March 2, 2023
JCH Optimize <= 3.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via admin settings CVE-2023-25491 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N March 2, 2023
WP Repost <= 0.1 - Authenticated (Administrator+) Stored Cross-Site Scritping CVE-2023-26534 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N February 28, 2023
Debug Assistant <= 1.4 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-26527 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N February 28, 2023
Advanced Text Widget <= 2.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-26539 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N February 28, 2023
Simple File List <= 6.0.9 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-1025 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N February 28, 2023
WP No External Links <= 1.0.2 - Authenticated (Administrator+) Stored Cross-Site Scritping CVE-2023-26537 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N February 28, 2023
We’re Open! <= 1.46 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-25964 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N February 27, 2023

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation