WordPress Plugin Vulnerabilities

WP Realty - index_ext.php listing_id Parameter Reflected XSS

Description

The wp-realty WordPress plugin was affected by an index_ext.php listing_id Parameter Reflected XSS security vulnerability.

Affects Plugins

Plugin icon
wp-realty
No known fix

References

URL
https://packetstormsecurity.com/files/#124418/

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
9a38406f-7bb2-42af-8ec0-f9fda4fc9843

Timeline

Publicly Published
2014-08-01 (about 9 years ago)
Added
2014-08-01 (about 9 years ago)
Last Updated
2019-10-21 (about 4 years ago)

Other

Published
Title
Published
2024-03-15
Title
User profile < 2.0.21 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Published
2023-11-07
Title
Master Slider Pro <= 3.6.5 - Reflected Cross-Site Scripting
Published
2016-03-28
Title
Music Store < 1.0.43 - Cross-Site Scripting (XSS)
Published
2023-11-17
Title
Gutenberg < 16.8.1 - Contributor+ Stored XSS
Published
2024-04-22
Title
Accessibility Widget < 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting