Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

wordpress wordpress 3.8.5 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2011-5104
Cross-site scripting (XSS) vulnerability in wpsc-admin/display-sales-logs.php in WP e-Commerce plugin 3.8.7.1 and possibly earlier for WordPress allows remote malicious users to inject arbitrary web script or HTML via the custom_text parameter. NOTE: some of these details are obt...
Getshopped Wp E-commerce 3.8.6Getshopped Wp E-commerce 3.8.5Getshopped Wp E-commerce 3.8Getshopped Wp E-commerce 3.7.8.1Getshopped Wp E-commerce 3.7.8Getshopped Wp E-commerce 3.7.7Getshopped Wp E-commerce 3.7.6.2Getshopped Wp E-commerce 3.7.6.1Getshopped Wp E-commerce 3.7Getshopped Wp E-commerce 3.7.5.3Getshopped Wp E-commerce 3.7.5Getshopped Wp E-commerce 3.6.13Getshopped Wp E-commerce 3.6.12Getshopped Wp E-commerce 3.8.4Getshopped Wp E-commerce 3.8.3Getshopped Wp E-commerce 3.7.6.9Getshopped Wp E-commerce 3.7.6.7Getshopped Wp E-commerce 3.7.6Getshopped Wp E-commerce 3.7.5.2Getshopped Wp E-commerce 3.7.5.1Getshopped Wp E-commerce 3.7.4Getshopped Wp E-commerce 3.6.11
7.5
CVSSv2
CVE-2012-5310
SQL injection vulnerability in the WP e-Commerce plugin prior to 3.8.7.6 for WordPress allows remote malicious users to execute arbitrary SQL commands via unspecified vectors.
Getshopped Wp E-commerce 3.8.7.3Getshopped Wp E-commerce 3.8.7.2Getshopped Wp E-commerce 3.8.4Getshopped Wp E-commerce 3.8.7.1Getshopped Wp E-commerce 3.8.1Getshopped Wp E-commerce 3.8.2Getshopped Wp E-commerce 3.7.6.4Getshopped Wp E-commerce 3.7.6.3Getshopped Wp E-commerce 3.7Getshopped Wp E-commerce 3.7.2Getshopped Wp E-commerce 3.7.6Getshopped Wp E-commerce 3.7.5Getshopped Wp E-commerce 3.6.5Getshopped Wp E-commerce 3.6.8Getshopped Wp E-commerceGetshopped Wp E-commerce 3.8Getshopped Wp E-commerce 3.8.6.1Getshopped Wp E-commerce 3.8.7Getshopped Wp E-commerce 3.7.8.2Getshopped Wp E-commerce 3.7.6.2Getshopped Wp E-commerce 3.7.6.1Getshopped Wp E-commerce 3.7.1
NA
CVE-2024-2791
The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widgets in all versions up to, and including, 3.8.5 due to insufficient input sanitization and output escaping on user supplied attributes. This make...
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
injectionCVE-2024-30983CVE-2023-4235CVE-2024-21338privilegeencryptionCVE-2023-4232CVE-2024-31497CVE-2024-32341
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook