Vulnerabilities > Icopydoc
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2025-02-21 | CVE-2024-13648 | Cross-site Scripting vulnerability in Icopydoc Maps for WP The Maps for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'MapOnePoint' shortcode in all versions up to, and including, 1.2.4 due to insufficient input sanitization and output escaping on user supplied attributes. | 5.4 |
| 2025-01-22 | CVE-2024-13406 | Cross-site Scripting vulnerability in Icopydoc XML for Google Merchant Center The XML for Google Merchant Center plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'feed_id' parameter in all versions up to, and including, 3.0.11 due to insufficient input sanitization and output escaping. | 6.1 |
| 2024-10-02 | CVE-2024-9378 | Cross-site Scripting vulnerability in Icopydoc YML for Yandex Market The YML for Yandex Market plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 4.7.2 due to insufficient input sanitization and output escaping. | 6.1 |
| 2023-08-17 | CVE-2023-30877 | Unspecified vulnerability in Icopydoc XML for Google Merchant Center Unauth. | 6.1 |
| 2023-08-16 | CVE-2023-30473 | Unspecified vulnerability in Icopydoc YML for Yandex Market Unauth. | 6.1 |