CVE-2017-18539

The weblibrarian plugin before 3.4.8.6 for WordPress has XSS via front-end short codes.

Source: CVE-2017-18539

CVE-2017-18540

The weblibrarian plugin before 3.4.8.7 for WordPress has XSS via front-end short codes.

Source: CVE-2017-18540

CVE-2017-18536

The stop-user-enumeration plugin before 1.3.8 for WordPress has XSS.

Source: CVE-2017-18536

CVE-2015-9321

The shortcode-factory plugin before 1.1.1 for WordPress has XSS via add_query_arg.

Source: CVE-2015-9321

CVE-2016-10899

The total-security plugin before 3.4.1 for WordPress has a settings-change vulnerability.

Source: CVE-2016-10899

CVE-2017-18537

The visitors-online plugin before 1.0.0 for WordPress has multiple XSS issues.

Source: CVE-2017-18537

CVE-2016-10897

The sermon-browser plugin before 0.45.16 for WordPress has multiple XSS issues.

Source: CVE-2016-10897

CVE-2016-10898

The total-security plugin before 3.4.1 for WordPress has XSS.

Source: CVE-2016-10898

CVE-2016-10896

The seo-redirection plugin before 4.3 for WordPress has stored XSS.

Source: CVE-2016-10896

CVE-2017-18534

The share-on-diaspora plugin before 0.7.2 for WordPress has reflected XSS in share URL parameters.

Source: CVE-2017-18534