Vulnerabilities

TI-2024-05529 CVE-2024-5966 · GHSA-prwf-rj34-gc23

Grey Opaque <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Download-Button Shortcode

LOW 28

The Grey Opaque theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter within the theme's Download-Button shortcode in all versions up to, and including, 2.0.1 due to insufficient input…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00257 Published 2024-06-22 No fix listed CWE-79

TI-2012-03653 CVE-2012-4273 · GHSA-qfmv-qw89-q9jw

Cross-site scripting (XSS) vulnerability in libs/xing.php in the 2 Click Social Media…

LOW 29

Cross-site scripting (XSS) vulnerability in libs/xing.php in the 2 Click Social Media Buttons plugin before 0.34 for WordPress allows remote attackers to inject arbitrary web script or HTML via the xing-url parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0578 Published 2012-08-13 No fix listed CWE-79

TI-2012-03652 CVE-2012-4272 · GHSA-jq22-mc34-52pm

Multiple cross-site scripting (XSS) vulnerabilities in the 2 Click Social Media Buttons…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in the 2 Click Social Media Buttons plugin before 0.34 for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to th…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01637 Published 2012-08-13 No fix listed CWE-79

Vulnerabilities

Filters

Grey Opaque <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Download-Button Shortcode

Cross-site scripting (XSS) vulnerability in libs/xing.php in the 2 Click Social Media…

Multiple cross-site scripting (XSS) vulnerabilities in the 2 Click Social Media Buttons…