CVE - API Security Blog

CVE-2023-30784

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Kaya Studio Kaya QR Code Generator plugin Read More ...

August 16, 2023

CVE-2023-30473

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Maxim Glazunov YML for Yandex Market plugin Read More ...

August 16, 2023

CVE-2023-30782

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Andy Moyle Church Admin plugin Read More ...

August 16, 2023

CVE-2023-30786

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Benjamin Guy Captcha Them All plugin Read More ...

August 16, 2023

CVE-2023-30785

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Video Grid plugin Read More ...

August 16, 2023

CVE-2023-30779

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Jonathan Daggerhart Query Wrangler plugin Read More ...

August 16, 2023

CVE-2023-30871

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in PT Woo Plugins (by Webdados) Stock Exporter for WooCommerce plugin Read More ...

August 16, 2023

CVE-2023-3958

The WP Remote Users Sync plugin for WordPress is vulnerable to Server Side Request Forgery via the 'notify_ping_remote' AJAX function in versions up to, and including, 1.2.12. This can allow authentic ...

August 16, 2023

CVSS3 - HIGH

CVSS2 - MEDIUM