TI-2020-10095 CVE-2020-12696 · GHSA-x6c7-c3v8-xmwc
The iframe plugin before 4.5 for WordPress does not sanitize a URL.
Priority LOW 31
The iframe plugin before 4.5 for WordPress does not sanitize a URL.
Iframe Project
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Iframe Project records in CISA KEVNo Iframe Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records in Iframe · all components
TI-2023-28564 CVE-2023-52125 · GHSA-9wr3-3xxw-mvrx
WordPress iFrame Plugin <= 4.8 is vulnerable to Cross Site Scripting (XSS)
Priority LOW 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webvitaly iframe allows Stored XSS.This issue affects iframe: from n/a through 4.8.
TI-2023-04530 CVE-2023-4919 · GHSA-fhx9-p329-4x23
iframe <= 4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'iframe' Shortcode
Priority LOW 29
The iframe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `iframe` shortcode in versions up to, and including, 4.6 due to insufficient input sanitization and output escaping.
TI-2023-10016 CVE-2023-24394 · GHSA-p8xr-3fgh-5q5f
WordPress iframe popup Plugin <= 3.3 is vulnerable to Cross Site Scripting (XSS)
Priority LOW 27
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy iframe popup plugin <= 3.3 versions.