Vulnerabilities > Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2019-08-12 | CVE-2018-20966 | Cross-site Scripting vulnerability in Booster FOR Woocommerce The woocommerce-jetpack plugin before 3.8.0 for WordPress has XSS in the Products Per Page feature. | 4.3 |
| 2019-08-12 | CVE-2018-20965 | Cross-site Scripting vulnerability in Ultimatemember Ultimate Member The ultimate-member plugin before 2.0.4 for WordPress has XSS. | 6.1 |
| 2019-08-12 | CVE-2017-18505 | Cross-site Scripting vulnerability in Bestwebsoft Twitter Button The twitter-plugin plugin before 2.55 for WordPress has XSS. | 4.3 |
| 2019-08-12 | CVE-2017-18503 | Cross-site Scripting vulnerability in Wpdeveloper Twitter Cards Meta The twitter-cards-meta plugin before 2.5.0 for WordPress has XSS. | 4.3 |
| 2019-08-12 | CVE-2017-18502 | Cross-site Scripting vulnerability in Bestwebsoft Subscriber The subscriber plugin before 1.3.5 for WordPress has multiple XSS issues. | 4.3 |
| 2019-08-12 | CVE-2017-18501 | Cross-site Scripting vulnerability in Bestwebsoft Social Login 0.1 The social-login-bws plugin before 0.2 for WordPress has multiple XSS issues. | 4.3 |
| 2019-08-12 | CVE-2017-18500 | Cross-site Scripting vulnerability in Bestwebsoft Social Buttons Pack The social-buttons-pack plugin before 1.1.1 for WordPress has multiple XSS issues. | 4.3 |
| 2019-08-12 | CVE-2017-18499 | Cross-site Scripting vulnerability in Simple-Membership-Plugin Simple Membership The simple-membership plugin before 3.5.7 for WordPress has XSS. | 6.1 |
| 2019-08-12 | CVE-2016-10872 | Cross-site Scripting vulnerability in Ultimatemember Ultimate Member The ultimate-member plugin before 1.3.40 for WordPress has XSS on the login form. | 6.1 |
| 2019-08-12 | CVE-2015-9304 | Cross-site Scripting vulnerability in Ultimatemember Ultimate Member The ultimate-member plugin before 1.3.18 for WordPress has XSS via text input. | 6.1 |