Vulnerabilities protected by our XSS: Cross Site Scripting firewall rule

33,784,007
Attacks Blocked in Past 24 Hours

Showing 4301-4320 of 6,219 Vulnerabilities

SyntaxHighlighter Evolved < 3.5.1 - Stored Cross-Site Scripting
7.2
CVE ID Unknown
Oct 21, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
InJob | Multi features for recruitment WordPress Theme < 3.3.8 - Cross-Site Scripting
7.2
CVE ID Unknown
Oct 21, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Jetpack <= 7.9 - Stored Cross-Site Scripting
6.4
CVE ID Unknown
Oct 19, 2019
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
All In One SEO Pack <= 3.2.6 - Stored Cross-Site Scripting
6.4
CVE-2019-16520
Oct 16, 2019
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
wpDataTables Lite plugin <= 2.0.11 - Cross-Site Scripting
6.1
CVE-2019-6011
Oct 16, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Events Manager <= 5.9.5 - Authenticated Stored Cross-Site Scripting
6.4
CVE-2019-16523
Oct 16, 2019
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
EU Cookie Law <= 3.1.2 - Authenticated Stored Cross-Site Scripting
5.5
CVE-2019-16522
Oct 16, 2019
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
Zoho CRM Lead Magnet <= 1.6.9.1 - Reflected Cross-Site Scripting
6.1
CVE-2019-19306
Oct 15, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Broken Link Checker <= 1.11.8 - Reflected Cross-Site Scripting
6.1
CVE-2019-16521
Oct 15, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WordPress Core < 5.2.4 - Authenticated Stored Cross-Site Scripting
6.4
CVE-2019-17672
Oct 14, 2019
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Easy Digital Downloads – Commissions <= 3.1.2 - Reflected Cross-Site Scripting
6.1
CVE-2015-9508
Oct 14, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Lara Google Analytics <= 2.0.4 - Stored Cross-Site Scripting
5.4
CVE-2020-20626
Oct 14, 2019
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
WordPress Core < 5.2.4 - Authenticated Stored Cross-Site Scripting via Customizer
5.5
CVE-2019-17674
Oct 14, 2019
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
Broken Link Checker <= 1.11.8 - Reflected Cross-Site Scripting
5.4
CVE-2019-17207
Oct 14, 2019
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
LIQUID SPEECH BALLOON < 1.0.7 - Cross-Site Scripting
6.1
CVE-2019-17070
Oct 10, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Client Dash <= 2.2.0 - Authenticated (Admin+) Cross-Site Scripting
5.5
CVE-2019-17071
Oct 10, 2019
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
SoundPress Plugin <= 2.2.0 - Stored Cross-Site Scripting
6.4
CVE ID Unknown
Oct 9, 2019
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Download Plugins and Themes from Dashboard <= 1.5.0 - Unauthenticated Stored Cross-Site Scripting
6.1
CVE-2019-17239
Oct 2, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Visualizer: Tables and Charts Manager for WordPress <= 3.3.0 - Stored Cross-Site Scripting
6.1
CVE-2019-16931
Sep 28, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Yoast Duplicate Post <= 3.2.3 - Authenticated (Admin+) Stored Cross-Site Scripting
5.5
CVE ID Unknown
Sep 26, 2019
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
SyntaxHighlighter Evolved < 3.5.1 - Stored Cross-Site Scripting 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N October 21, 2019
InJob | Multi features for recruitment WordPress Theme < 3.3.8 - Cross-Site Scripting 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N October 21, 2019
Jetpack <= 7.9 - Stored Cross-Site Scripting 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N October 19, 2019
All In One SEO Pack <= 3.2.6 - Stored Cross-Site Scripting CVE-2019-16520 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N October 16, 2019
wpDataTables Lite plugin <= 2.0.11 - Cross-Site Scripting CVE-2019-6011 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N October 16, 2019
Events Manager <= 5.9.5 - Authenticated Stored Cross-Site Scripting CVE-2019-16523 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N October 16, 2019
EU Cookie Law <= 3.1.2 - Authenticated Stored Cross-Site Scripting CVE-2019-16522 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N October 16, 2019
Zoho CRM Lead Magnet <= 1.6.9.1 - Reflected Cross-Site Scripting CVE-2019-19306 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N October 15, 2019
Broken Link Checker <= 1.11.8 - Reflected Cross-Site Scripting CVE-2019-16521 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N October 15, 2019
WordPress Core < 5.2.4 - Authenticated Stored Cross-Site Scripting CVE-2019-17672 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N October 14, 2019
Easy Digital Downloads – Commissions <= 3.1.2 - Reflected Cross-Site Scripting CVE-2015-9508 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N October 14, 2019
Lara Google Analytics <= 2.0.4 - Stored Cross-Site Scripting CVE-2020-20626 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N October 14, 2019
WordPress Core < 5.2.4 - Authenticated Stored Cross-Site Scripting via Customizer CVE-2019-17674 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N October 14, 2019
Broken Link Checker <= 1.11.8 - Reflected Cross-Site Scripting CVE-2019-17207 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N October 14, 2019
LIQUID SPEECH BALLOON < 1.0.7 - Cross-Site Scripting CVE-2019-17070 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N October 10, 2019
Client Dash <= 2.2.0 - Authenticated (Admin+) Cross-Site Scripting CVE-2019-17071 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N October 10, 2019
SoundPress Plugin <= 2.2.0 - Stored Cross-Site Scripting 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N October 9, 2019
Download Plugins and Themes from Dashboard <= 1.5.0 - Unauthenticated Stored Cross-Site Scripting CVE-2019-17239 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N October 2, 2019
Visualizer: Tables and Charts Manager for WordPress <= 3.3.0 - Stored Cross-Site Scripting CVE-2019-16931 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N September 28, 2019
Yoast Duplicate Post <= 3.2.3 - Authenticated (Admin+) Stored Cross-Site Scripting 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N September 26, 2019

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation