Filtered by vendor Androidbubble Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-35696 1 Androidbubble 1 Wp Docs 2024-12-02 7.1 High
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Fahad Mahmood WP Docs allows Reflected XSS.This issue affects WP Docs: from n/a through 2.1.3.
CVE-2024-31294 1 Androidbubble 1 Wp Sort Order 2024-11-21 4.3 Medium
Missing Authorization vulnerability in Fahad Mahmood WP Sort Order.This issue affects WP Sort Order: from n/a through 1.3.1.
CVE-2024-9836 1 Androidbubble 1 Rss Feed Widget 2024-11-12 5.9 Medium
The RSS Feed Widget WordPress plugin before 3.0.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVE-2024-9835 1 Androidbubble 1 Rss Feed Widget 2024-11-12 4.8 Medium
The RSS Feed Widget WordPress plugin before 3.0.1 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers