Vulnerabilities protected by our XSS: Cross Site Scripting firewall rule

14,161,955
Attacks Blocked in Past 24 Hours

Showing 7141-7160 of 7,240 Vulnerabilities

Title CVE ID CVSS Vector Date
Shipyaari Shipping Management <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-26528 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N February 20, 2023
Binge Site Verification using Meta Tag <= 1.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Admin Settings CVE-2023-23875 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N February 20, 2023
Circles Gallery <= 1.0.10 - Authenticated (Admin+) Stored Cross-Site Scripting via Admin Settings CVE-2023-23881 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N February 20, 2023
Video Gallery – YouTube Gallery <= 1.7.6 - Authenticated (Admin+) Stored Cross Site Scripting CVE-2023-25979 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N February 20, 2023
Sitemap Index <= 1.2.3 - Authenticated(Admin+) Stored Cross-Site Scripting CVE-2023-23816 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N February 20, 2023
Exquisite PayPal Donation <= v2.0.0 - Authenticated(Admin+) Stored Cross-Site Scripting CVE-2023-23785 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N February 20, 2023
Stock market charts from finviz <= 1.0.1 - Authenticated(Admin+) Stored Cross-Site Scripting CVE-2023-23809 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N February 20, 2023
Clio Grow <= 1.0.0 - Authenticated (Admin+) Stored Cross Site Scripting CVE-2023-22683 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N February 20, 2023
Sticky Ad Bar <= 1.3.1 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2023-25784 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N February 15, 2023
Easy Panorama <= 1.1.4 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-23799 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N February 15, 2023
Eyes Only: User Access Shortcode <= 1.8.2 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-25786 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N February 15, 2023
WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.5.14 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2023-23710 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N February 15, 2023
Upload File Type Settings Plugin <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-25781 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N February 15, 2023
Wp-Insert <= 2.5.0 Authenticated (Admin+) Stored Cross Site Scripting CVE-2023-25461 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N February 15, 2023
Nooz <= 1.6.0 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2023-25794 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N February 15, 2023
Service Area Postcode Checker <= 2.0.8 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-25782 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N February 15, 2023
WP BaiDu Submit <= 1.2.1 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2023-25796 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N February 15, 2023
Podlove Subscribe button <= 1.3.7 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-25479 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N February 15, 2023
WP资源下载管理 <= 1.3.9 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-25787 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N February 15, 2023
WP Open Social <= 5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-25792 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N February 15, 2023

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation