Vulnerabilities

TI-2021-06642 CVE-2021-24350 · GHSA-98c2-3mpw-gw7c

Visitors <= 0.3 - Unauthenticated Stored Cross-Site Scripting (XSS)

LOW 30

The Visitors WordPress plugin through 0.3 is affected by an Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01303 Published 2021-06-14 No fix listed CWE-79

TI-2017-13710 CVE-2017-18537 · GHSA-9pr9-5973-55vh

The visitors-online plugin before 1.0.0 for WordPress has multiple XSS issues.

LOW 31

The visitors-online plugin before 1.0.0 for WordPress has multiple XSS issues.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01621 Published 2019-08-21 No fix listed CWE-79

TI-2015-07702 CVE-2015-9325 · GHSA-rhf4-2735-rh9w

The visitors-online plugin before 0.4 for WordPress has SQL injection.

MEDIUM 46

The visitors-online plugin before 0.4 for WordPress has SQL injection.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01848 Published 2019-08-16 No fix listed CWE-89

TI-2017-01471 CVE-2017-2171 · GHSA-947h-g3wj-rr28

Cross-site scripting in BestWebSoft Captcha

LOW 29

Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact Form prior to version 4.0.6, Contact Form to DB prior to version…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00886 Published 2017-05-22 No fix listed CWE-79

Vulnerabilities

Filters

Visitors <= 0.3 - Unauthenticated Stored Cross-Site Scripting (XSS)

The visitors-online plugin before 1.0.0 for WordPress has multiple XSS issues.

The visitors-online plugin before 0.4 for WordPress has SQL injection.

Cross-site scripting in BestWebSoft Captcha