Skip to content
OpenAdvisories

Product · Fahad Mahmood

WP Datepicker

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.1
    CVE-2024-12468

    WP Datepicker <= 2.1.4 - Reflected Cross-Site Scripting

    The WP Datepicker plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpdp_get_selected_datepicker' parameter in all versions up to, and including, 2.1.4 due to insufficient input sanitization and output escaping. This makes it possi…

    Fahad Mahmood WP Datepicker Web / CMS
  • Medium 6.5
    CVE-2024-47321

    WordPress WP Datepicker plugin <= 2.1.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Fahad Mahmood WP Datepicker wp-datepicker.This issue affects WP Datepicker: from n/a through <= 2.1.1.

    Fahad Mahmood WP Datepicker
  • Medium 5.9
    CVE-2024-44042

    WordPress WP Datepicker plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fahad Mahmood WP Datepicker wp-datepicker allows Stored XSS.This issue affects WP Datepicker: from n/a through <= 2.1.1.

    Fahad Mahmood WP Datepicker