Vulnerabilities protected by our XSS: Cross Site Scripting firewall rule

35,417,673
Attacks Blocked in Past 24 Hours

Showing 6001-6020 of 6,130 Vulnerabilities

s2Member® Framework (Membership, Member Level Roles, Access Capabilities, PayPal Members) < 111220 - Cross-Site Scripting
7.2
CVE-2011-5082
Feb 12, 2012
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Slideshow Gallery <= 1.1.4 - Cross-Site Scripting
7.1
CVE-2012-5229
Jan 26, 2012
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
My Calendar < 1.10.5 - Cross-Site Scripting
6.1
CVE-2012-6527
Jan 18, 2012
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Shortcode Redirect <= 1.0.01 - Cross-Site Scripting
5.4
CVE-2012-5325
Jan 18, 2012
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
YouSayToo auto-publishing plugin <= 1.0 - Cross-Site Scripting
6.1
CVE-2012-0901
Jan 8, 2012
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Pay With Tweet <= 1.1 - Cross-Site Scripting
6.1
CVE-2012-5349
Jan 6, 2012
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Pretty Link Lite < 1.5.6 - Cross-Site Scripting
6.1
CVE-2011-5192
Jan 6, 2012
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WordPress Core <= 3.3 - Cross-Site Scripting
6.4
CVE-2012-0287
Jan 3, 2012
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
WP Live.php <= 1.2.1 - Cross-Site Scripting
6.1
CVE-2012-5346
Jan 1, 2012
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
TheCartPress eCommerce Shopping Cart <= 1.1.5 - Cross-Site Scripting
6.1
CVE-2011-5207
Dec 31, 2011
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Connections Business Directory < 0.7.1.6 - Authorization Bypass
6.1
CVE-2011-5254
Dec 29, 2011
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WordPress Sentinel <= 1.0.0 - Cross-Site Scripting
6.1
CVE-2011-5225
Dec 14, 2011
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Pretty Link Lite < 1.5.4 - Cross-Site Scripting
6.1
CVE-2011-5191
Dec 12, 2011
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Disqus Comment System < 2.68 - Reflected Cross-Site Scripting
7.1
CVE ID Unknown
Dec 11, 2011
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Lazyest Backup < 0.2.2 - Reflected Cross-Site Scripting
6.1
CVE-2011-5264
Dec 5, 2011
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Pretty Links – Link Management, Branding, Tracking & Sharing Plugin < 1.5.6 - Reflected Cross-Site Scripting
6.1
CVE-2011-4595
Dec 4, 2011
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
ZooEffect Plugin for Video player, Photo Gallery Slideshow jQuery and audio / music / podcast – HTML5 <= 1.11 - Reflected Cross-Site Scripting
6.1
CVE-2011-5180
Nov 30, 2011
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Album and Image Gallery with Lightbox – Flagallery Photo Portfolio < 1.57 - Cross-Site Scripting
6.1
CVE-2011-4624
Nov 30, 2011
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Skysa App Bar Integration < 1.04 - Cross-Site Scripting
7.1
CVE-2011-5179
Nov 28, 2011
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Featurific For WordPress <= 1.6.2 - Cross-Site Scripting
6.1
CVE-2011-5265
Nov 24, 2011
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
s2Member® Framework (Membership, Member Level Roles, Access Capabilities, PayPal Members) < 111220 - Cross-Site Scripting CVE-2011-5082 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N February 12, 2012
Slideshow Gallery <= 1.1.4 - Cross-Site Scripting CVE-2012-5229 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L January 26, 2012
My Calendar < 1.10.5 - Cross-Site Scripting CVE-2012-6527 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 18, 2012
Shortcode Redirect <= 1.0.01 - Cross-Site Scripting CVE-2012-5325 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N January 18, 2012
YouSayToo auto-publishing plugin <= 1.0 - Cross-Site Scripting CVE-2012-0901 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 8, 2012
Pay With Tweet <= 1.1 - Cross-Site Scripting CVE-2012-5349 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 6, 2012
Pretty Link Lite < 1.5.6 - Cross-Site Scripting CVE-2011-5192 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 6, 2012
WordPress Core <= 3.3 - Cross-Site Scripting CVE-2012-0287 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N January 3, 2012
WP Live.php <= 1.2.1 - Cross-Site Scripting CVE-2012-5346 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 1, 2012
TheCartPress eCommerce Shopping Cart <= 1.1.5 - Cross-Site Scripting CVE-2011-5207 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N December 31, 2011
Connections Business Directory < 0.7.1.6 - Authorization Bypass CVE-2011-5254 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N December 29, 2011
WordPress Sentinel <= 1.0.0 - Cross-Site Scripting CVE-2011-5225 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N December 14, 2011
Pretty Link Lite < 1.5.4 - Cross-Site Scripting CVE-2011-5191 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N December 12, 2011
Disqus Comment System < 2.68 - Reflected Cross-Site Scripting 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L December 11, 2011
Lazyest Backup < 0.2.2 - Reflected Cross-Site Scripting CVE-2011-5264 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N December 5, 2011
Pretty Links – Link Management, Branding, Tracking & Sharing Plugin < 1.5.6 - Reflected Cross-Site Scripting CVE-2011-4595 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N December 4, 2011
ZooEffect Plugin for Video player, Photo Gallery Slideshow jQuery and audio / music / podcast – HTML5 <= 1.11 - Reflected Cross-Site Scripting CVE-2011-5180 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N November 30, 2011
Album and Image Gallery with Lightbox – Flagallery Photo Portfolio < 1.57 - Cross-Site Scripting CVE-2011-4624 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N November 30, 2011
Skysa App Bar Integration < 1.04 - Cross-Site Scripting CVE-2011-5179 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L November 28, 2011
Featurific For WordPress <= 1.6.2 - Cross-Site Scripting CVE-2011-5265 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N November 24, 2011

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation