WordPress Plugin Vulnerabilities

Simplified Content <= 1.0.0 - XSS

Description

The Simplified Content WordPress plugin was affected by a XSS security vulnerability.

Affects Plugins

Plugin icon
simplified-content
Fixed in 1.0.1

References

CVE
CVE-2016-1000150
URL
http://www.vapidlabs.com/wp/wp_advisory.php?v=853

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Verified
No
WPVDB ID
12d7f1f8-2374-4dae-beb0-c3bd5691879a

Timeline

Publicly Published
2016-10-10 (about 7 years ago)
Added
2019-08-23 (about 4 years ago)
Last Updated
2020-09-22 (about 3 years ago)

Other

Published
Title
Published
2014-08-01
Title
thethe-layout-grid <= 1.0.0 - XSS in ZeroClipboard.
Published
2023-05-25
Title
This Day In History <= 3.10.1 - Unauthenticated Reflected XSS
Published
2017-10-11
Title
Qards - Stored Cross-Site Scripting (XSS)
Published
2024-02-13
Title
Enhanced Text Widget < 1.6.6 - Admin+ Stored XSS
Published
2021-12-23
Title
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.25 - Reflected XSS