Vulnerabilities > Themes4Wp
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-10-28 | CVE-2024-50470 | Cross-site Scripting vulnerability in Themes4Wp Youtube External Subtitles Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Themes4WP Themes4WP YouTube External Subtitles allows Stored XSS.This issue affects Themes4WP YouTube External Subtitles: from n/a through 1.0. | 5.4 |
| 2024-10-04 | CVE-2024-9353 | Cross-site Scripting vulnerability in Themes4Wp Popularis Extra The Popularis Extra plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.2.6. | 6.1 |