Filtered by vendor Pootlepress Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2017-15811 1 Pootlepress 1 Pootle Button 2025-04-20 N/A
The Pootle Button plugin before 1.2.0 for WordPress has XSS via the assets_url parameter in assets/dialog.php, exploitable via wp-admin/admin-ajax.php.
CVE-2022-0728 1 Pootlepress 1 Easy Smooth Scroll Links 2024-11-21 4.8 Medium
The Easy Smooth Scroll Links WordPress plugin before 2.23.1 does not sanitise and escape its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed