CVE-2017-18529

The promobar plugin before 1.1.1 for WordPress has multiple XSS issues.

Source: CVE-2017-18529

CVE-2017-18530

The rating-bws plugin before 0.2 for WordPress has multiple XSS issues.

Source: CVE-2017-18530

CVE-2017-18532

The realty plugin before 1.1.0 for WordPress has multiple XSS issues.

Source: CVE-2017-18532

CVE-2017-18533

The rimons-twitter-widget plugin before 1.3 for WordPress has XSS.

Source: CVE-2017-18533

CVE-2016-10895

The option-tree plugin before 2.6.0 for WordPress has XSS via an add_list_item or add_social_links AJAX request.

Source: CVE-2016-10895

CVE-2017-18524

The football-pool plugin before 2.6.5 for WordPress has multiple XSS issues.

Source: CVE-2017-18524

CVE-2016-10892

The chained-quiz plugin before 1.0 for WordPress has multiple XSS issues.

Source: CVE-2016-10892

CVE-2015-9320

The option-tree plugin before 2.5.4 for WordPress has XSS related to add_query_arg.

Source: CVE-2015-9320

CVE-2017-18523

The eelv-newsletter plugin before 4.6.1 for WordPress has CSRF in the address book.

Source: CVE-2017-18523

CVE-2017-18522

The eelv-newsletter plugin before 4.6.1 for WordPress has XSS in the address book.

Source: CVE-2017-18522