Shapedplugin vulnerabilities, page 2
26 vulnerabilities
Known vulnerabilities in Shapedplugin products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 15 products.
MediumCVE-2023-52124shapedplugin llc · wp tabs – responsive tabs plugin for wordpress +2 moreWordPress WP Tabs Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ShapedPlugin LLC WP Tabs – Responsive Tabs Plugin for WordPress allows Stored XSS.This issue affects WP Tabs – Responsive Tabs Plugin for WordPress: from n/a through 2.2.0.EPSS0.30%MediumCVE-2023-0537shapedplugin · product_slider_for_woocommerce +2 moreProduct Slider For WooCommerce Lite <= 1.1.7 - Contributor+ Stored XSSThe Product Slider For WooCommerce Lite WordPress plugin through 1.1.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacksEPSS0.50%MediumCVE-2023-0360shapedplugin · location_weather +2 moreLocation Weather < 1.3.4 - Contributor+ Stored XSSThe Location Weather WordPress plugin before 1.3.4 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.EPSS0.54%MediumCVE-2023-0071shapedplugin · wp_tabs +2 moreWP Tabs < 2.1.17 - Contributor+ Stored XSSThe WP Tabs WordPress plugin before 2.1.17 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.EPSS0.53%MediumCVE-2023-0097shapedplugin · smart_post_show +2 morePost Grid, Post Carousel, & List Category Posts < 2.4.19 - Contributor+ Stored XSSThe Post Grid, Post Carousel, & List Category Posts WordPress plugin before 2.4.19 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.EPSS0.47%HighCVE-2023-25065shapedplugin · wp_tabs +2 moreWordPress WP Tabs Plugin <= 2.1.14 is vulnerable to Cross Site Request Forgery (CSRF)Cross-Site Request Forgery (CSRF) vulnerability in ShapedPlugin WP Tabs – Responsive Tabs Plugin for WordPress plugin <= 2.1.14 versions.EPSS0.26%