Vulnerabilities protected by our XSS: Cross Site Scripting firewall rule

32,808,478
Attacks Blocked in Past 24 Hours

Showing 101-120 of 6,132 Vulnerabilities

Shield Security <= 18.5.7 - Unauthenticated Stored Cross-Site Scripting via getColumnContent_Page
7.2
CVE-2024-22163
Jan 16, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
SimpleMap Store Locator <= 2.6.1 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2024-22282
Jan 16, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
CformsII <= 15.0.5 - Unauthenticated stored Cross-Site Scripting
7.2
CVE-2024-22149
Jan 15, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
ARForms <= 1.5.8 - Unauthenticated Stored Cross-Site Scripting via arf_http_referrer_url
7.2
CVE-2023-6828
Jan 3, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Custom 404 Pro <= 3.10.0 - Unauthenticated Stored Cross-Site Scripting via logging
7.2
CVE-2023-51540
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Product Catalog Mode For WooCommerce <= 5.0.2 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2023-5348
Nov 21, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Bus Ticket Booking with Seat Reservation <= 5.2.5 - Unauthenticated Cross-Site Scripting
7.2
CVE-2023-30496
Nov 13, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
WP Event Manager <= 3.1.42 - Cross-Site Scripting
7.2
CVE-2023-47697
Nov 9, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
POST SMTP Mailer <= 2.7.0 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2023-5958
Nov 6, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
wpDiscuz <= 7.6.11 - Unauthenticated Stored Cross-Site Scripting via Comment Uploaded Image Filename
7.2
CVE-2023-47185
Oct 31, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
MpOperationLogs <= 1.0.1 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2023-5538
Oct 17, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
User Feedback <= 1.0.9 - Unauthenticated Cross-Site Scripting
7.2
CVE-2023-46153
Oct 17, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Lava Directory Manager <= 1.1.34 - Unauthenticated Stored Cross-Site Scripting via New Listing
7.2
CVE-2023-46081
Oct 16, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Form Maker by 10Web <= 1.15.18 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2023-45071
Oct 3, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
AmpedSense – AdSense Split Tester <= 4.68 - Unauthenticated Cross-Site Scripting
7.2
CVE-2023-25476
Oct 3, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
FooGallery <= 2.2.44 - Reflected Cross-Site Scripting
7.2
CVE-2023-44244
Sep 29, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Page Builder: Pagelayer – Drag and Drop website builder <= 1.7.6 - Missing Authorization to Stored Cross-Site Scripting
7.2
CVE-2023-4687
Sep 25, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Drag and Drop Multiple File Upload for WooCommerce <= 1.1.0 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2023-4821
Sep 21, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
PeproDev CF7 Database <= 1.7.0 - Unauthenticated Stored Cross-Site Scripting via form submission
7.2
CVE-2023-41863
Sep 5, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Simple Membership <= 4.3.5 - Reflected Cross-Site Scripting
7.2
CVE-2023-4719
Sep 5, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
Shield Security <= 18.5.7 - Unauthenticated Stored Cross-Site Scripting via getColumnContent_Page CVE-2024-22163 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N January 16, 2024
SimpleMap Store Locator <= 2.6.1 - Unauthenticated Stored Cross-Site Scripting CVE-2024-22282 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N January 16, 2024
CformsII <= 15.0.5 - Unauthenticated stored Cross-Site Scripting CVE-2024-22149 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N January 15, 2024
ARForms <= 1.5.8 - Unauthenticated Stored Cross-Site Scripting via arf_http_referrer_url CVE-2023-6828 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N January 3, 2024
Custom 404 Pro <= 3.10.0 - Unauthenticated Stored Cross-Site Scripting via logging CVE-2023-51540 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N December 27, 2023
Product Catalog Mode For WooCommerce <= 5.0.2 - Unauthenticated Stored Cross-Site Scripting CVE-2023-5348 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N November 21, 2023
Bus Ticket Booking with Seat Reservation <= 5.2.5 - Unauthenticated Cross-Site Scripting CVE-2023-30496 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N November 13, 2023
WP Event Manager <= 3.1.42 - Cross-Site Scripting CVE-2023-47697 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N November 9, 2023
POST SMTP Mailer <= 2.7.0 - Unauthenticated Stored Cross-Site Scripting CVE-2023-5958 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N November 6, 2023
wpDiscuz <= 7.6.11 - Unauthenticated Stored Cross-Site Scripting via Comment Uploaded Image Filename CVE-2023-47185 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N October 31, 2023
MpOperationLogs <= 1.0.1 - Unauthenticated Stored Cross-Site Scripting CVE-2023-5538 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N October 17, 2023
User Feedback <= 1.0.9 - Unauthenticated Cross-Site Scripting CVE-2023-46153 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N October 17, 2023
Lava Directory Manager <= 1.1.34 - Unauthenticated Stored Cross-Site Scripting via New Listing CVE-2023-46081 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N October 16, 2023
Form Maker by 10Web <= 1.15.18 - Unauthenticated Stored Cross-Site Scripting CVE-2023-45071 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N October 3, 2023
AmpedSense – AdSense Split Tester <= 4.68 - Unauthenticated Cross-Site Scripting CVE-2023-25476 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N October 3, 2023
FooGallery <= 2.2.44 - Reflected Cross-Site Scripting CVE-2023-44244 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N September 29, 2023
Page Builder: Pagelayer – Drag and Drop website builder <= 1.7.6 - Missing Authorization to Stored Cross-Site Scripting CVE-2023-4687 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N September 25, 2023
Drag and Drop Multiple File Upload for WooCommerce <= 1.1.0 - Unauthenticated Stored Cross-Site Scripting CVE-2023-4821 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N September 21, 2023
PeproDev CF7 Database <= 1.7.0 - Unauthenticated Stored Cross-Site Scripting via form submission CVE-2023-41863 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N September 5, 2023
Simple Membership <= 4.3.5 - Reflected Cross-Site Scripting CVE-2023-4719 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N September 5, 2023

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation