Skip to content
OpenAdvisories

Vendor

azurecurve

4 known vulnerabilities.

Products

azurecurve Floating Featured Image 1 azurecurve Toggle Show/Hide 1 azurecurve BBCode 1 azurecurve Shortcodes in Comments 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2025-8398

    azurecurve BBCode <= 2.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Shortcode

    The azurecurve BBCode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'url' shortcode in all versions up to, and including, 2.0.4 due to insufficient input sanitization and output escaping on user supplied attributes. This m…

    azurecurve azurecurve BBCode Web / CMS
  • Medium 6.5
    CVE-2024-43961

    WordPress azurecurve Toggle Show/Hide plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in azurecurve azurecurve Toggle Show/Hide allows Stored XSS.This issue affects azurecurve Toggle Show/Hide: from n/a through 2.1.3.

    azurecurve azurecurve Toggle Show/Hide