WordPress Plugin Vulnerabilities

Woocommerce Jetpack < 3.8.0 - XSS

Description

The Booster for WooCommerce WordPress plugin was affected by a XSS security vulnerability.

Affects Plugins

Plugin icon
woocommerce-jetpack
Fixed in 3.8.0

References

CVE
CVE-2018-20966

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Verified
No
WPVDB ID
b7406a9b-2d8c-4d3c-9287-24d975eaf16c

Timeline

Publicly Published
2018-07-28 (about 5 years ago)
Added
2019-08-20 (about 4 years ago)
Last Updated
2020-09-22 (about 3 years ago)

Other

Published
Title
Published
2014-08-01
Title
IgnitionDeck 1.1 - Purchase Form Unspecified XSS
Published
2022-05-16
Title
Video Slider - Slider Carousel < 1.4.8 - Admin+ Stored Cross-Site Scripting
Published
2022-05-27
Title
Export All URLs < 4.2 - Editor+ Stored Cross-Site Scripting
Published
2019-05-21
Title
WP Slimstat <= 4.8 - Unauthenticated Stored XSS from Visitors
Published
2023-12-22
Title
Booking for Appointments and Events Calendar – Amelia < 1.0.86 - Contributor+ Stored XSS