The Woo Bulk Price Update WordPress plugin, in versions < 2.2.2, is affected by a reflected cross-site scripting vulnerability in the 'page' parameter to the techno_get_products action, which can only be triggered by an…
CVSS 3.1MEDIUM 5.4·Network·Low privileges·User interaction·EPSS 0.00887·Published 2023-03-22·Fixed in 2.2.2CWE-79
The Christmas Greetings plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the code parameter in all versions up to, and including, 1.2.5 due to insufficient input sanitization and output escaping.